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(57) Abstract 

A digital satellite television system has a plurality of sct-top-*oxes associated with a plurality of end users' television receivers, 
a modem and a decoder housed in each STB, a Subscriber Authorization System (SAS) incorporating or havmg associated therewith a 
plurality of communication servera. means included in the SAS for generating Electtonic Managements Messages (EMM), a back channel 
interconnecting each of the STBs individually with the SAS. means included in the SAS and each STB so that the necessary information 
required to inject a relevant EMM into the system is supplied directiy to the relevant communication server included in or associated with 
die SAS to audiorise the release of the said EMM and/or means to connect the modem to die back channel and means whereby an EMM 
is transmissible to the decoder directly ftom a relevant communication server included in or associated widi die SAS. Further important 
features are also disclosed. 
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WROADCAST AND RECEPTION SYSTEM. AND CONDITIONAL ACCESS 

gyyrFM THEREFOR 

The present invention relates to a broadcast and reception system, in particular to a 
mass-market digital interactive satellite television system, and to a conditional access 
5 system therefor. 

In particular, but not exclusively, the invention relates to a mass-market broadcast 
system having some or all of the following preferred features:- 

• It is an information broadcast system, preferably a radio and/or television 
broadcast system 

10 • It is a satellite system (although it could be applicjible to cable or terrestrial 
transmission) 

• It is a digital system, preferably using the MPEG, more preferably the MPEG- 
2, compression system for data/signal transmission 

• It affords, the possibility of interactivity. 

15 More particularly the present invention relates to so-called pay television (or radio) 
where a user/viewer selects a programme/fibn/game to be viewed for which payment 
is to be made, this being referred to as a pay-per-view (PPV)^ in the case of data 
to be downloaded a . S9-called pay-|wr-file(P^ 



With such known PPV or PPF systems a significaiit amount of time is required to be 
20 s^t by :th6 user/viewer, inl^er to carry out the acti6fl| necfe^ry to actually aoxss 
the product being selected. « 



■ .. iorrexample, in one known system, the sequence of stc^s wM(^h have to be carried out 
are as follows:- - 

• • . J. . • -) :>i 

- * /: • rx i 

! ..V. *V. ' T) The user ieiephone&'a so-called Sub^cpper Management Systein <SMS) 
25 which in this known system^cludcs a numbetVof Human operators which anS>yer the . 
subscriber's call and to yrhqjA the'sUbscriber communi^tes the necessary information 
concerning the selected product md concerning 'tfiCfli^anda^ status of the sMbscriber 
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to. a sor-called Subscriber -Authorization System: (S AS), which has included in it or 
u .^ associated with.it -a pliirality^^^^ . - ^ s- 

. . ii) J vH^c- operator at the SMS then has to check the .finandal status ^of the 
user before authorising the connection from the commtihications servers' tQ:the^user*s 
5 television set so that the product can be delivered and viewed by the user. 

In another loiowii s;^i5t^m^theiuman operator is repliaced by -an automiatic voice server 
SOT diatfWhen* the liser telephones the SMS heyshe hears a A^oicc activated recording to 
which the user^conveys the same iAfermation as>-I) above. ' - ' . t Ir: ^ 

This second arrangement reduces the delay inherent in the first described arrangement 
10 " ■ which ^^:an be-inore easily overloaded, when: large numbers of users are wishing to 
' Order a product at; the samcaimfev : - ^.^ i / / :.r. ^^^c/^. c: 

However, even with this second arrangement 4he user 4s involved in inputting 
significant information in the form of lengthy serial numbers which operation provides 
plenty of scope f6r error as" well as being time consuming. ; ' 

15^ The- third lc£il&Wn^£inatigement Evolves- the user making use *of existing screeii based 
systems such as MTNTTEL in France and PRESTEL in the United KiiigdDmv which 
'system^'*epla^^^ scrvcr^referred to above 'iri cCflnection with the 

second arrangement. The MINITEL and PRESTEL systems themselves in<S3iporatc 
a modeimPat tlk^-conisiimer-Mdf;^ 7 z^r/'^jo-y. . :. :.iL 

20 In all these known arrangements the user is involved in the expenditure of significant 
time and effort in inputting all the information necessary to enable the system to in 
effeat authdrizg^the^^nSmisis^ the chosen pttidtictw-the- user's television set. 

In the case df a'saWtlite;leleVis$i^^^ there is- a fUrther delay involved in t^^ usfcf 

actually receiving the product selected. 
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In PPV.and PPF systems' the key clement intCQiatTollin&Jhe user'S).{udc6ss.toiproducts 
are so-called Entitlement Management Mcssage?;(EMM)i which. have: ;to be injected 
into the system in order to give the user product access. More particularly the EMMs 
. : 3iejJhe mechanism .by ^yhich:.the ^caicrypted data rorcpr^ of,^ product is 

5 r;. J decrypt^' for/ a> particular: indi vidua !: ;:r:? * :£» in'/ ^ 

In known satellite television systems the EMMs arc transmitted to the user's 
. .tetevisions Yia the satellite linfc at regular inttffyalsao:ibe;Wa*EG-2idata::«rGam /Thus 
an:in the Case of a .particular user's BMM there. <^:b£i ia;:Sigmfie3»tr^el^^^ o£ perhaps 
several minutes before the user}s.ni5X^JGJ^M;.t]fc^ user's 
10 television set. 

; ^ This transmission delay is. in addition to thcjiejyay refciSeed jto.earlieriwhichiS 

in the user having to manually input certain dat^tint0r>theiSystmc^^ T^ cumulative 
effect of these two delays is that it may take perhaps typically five minutes for a user 
ir, to bejahle to gain access to i the selected prod^^ ;:ra: r rfv/ . ' ^' 

15 The present invention is rcpncerned with overcoming. this:^^ x • - . | 

In a filst aspec:t,'.,thc present invention ^ pHT^vMssr -a; n€0«i^^^ 

:i:i.-^/QOjnpnsmg: . J^'^ ...^r ' m jyrri^:/. '::iiSc 

- i5 \ . means for generating; a plurality of L(pr^fej:si)lyoRPP<StiPS^i^e?^^ 

20 means for receiving the messages, saicfc j[^cejvii)grT#|e^s,. being a^ to 

communicate with said generating means via a communications server connected 
. f". : directly to said generating means;: : , ^ ^ :.:;r.:-v* (v'-zS : : : 

.Preferably, the message dSian entitlement na.essagc:for .trsmspniss^^ example by 

broadcast) to the receiving means, said generating means being adapted to generate 
25:j : lertfittement messages in response to daja rccejvfd firp?^;^ 

The generating means may be arranged to transmit a message as a packet of digital 
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data to said receiving ineahs> eitHei^ via said cominunications seifvcr or Via a satellite 

The receiving means may be connectable to said commiinications server via a modem 
and telephone link. 

5 In a related aspect, the present invention provides a conditional access' system for 
' ^f6r<ling-cdnditiohM^ access to Wbscrib^^ 
a subscriber management system; 
J an ^ ^ subscriber' author^tion system caupled,to the subscriber management 
system; and .^^ 
10 : - ' ^a communications server; said servcr beirig connected directly to the subscriber 
authorization system. 

1^ - The system may:^fiirther comprise a receiver/decoder for the subscriber, the 
reccii^er/dbcoder being connectable to said commiinications server; and hbne6 'to said 
' Subscriber ^uthbri22iti6n s^^ via a mddem * and "telephone link. . ' . ? 

IS ' In a secdhd^ aspect;^e pre^nt mvfentdbn provides a broadca^^- and reception ^system 
Mcluding a cbhdiiiohai^^^ y u 

:.ci: ^.^]^; aTi(|ji^ aspect;' ffee' present- mvenfiori broadcast and reception system 

'^-IsSlSpaSUig?^^^ ^'^^ -.ro- -.j-v 

means for generating a plurality of entitlement messages relating to broadcast 
20" programs; rvi — - ^'^.^ r.rj "i .• ■ ^:.> j t -r.- . . :-i • 

means for receiving said messages from said generating^ means; and • 
means for connecting the receiving means to the generating means to receive 
said hiessages} sa3d' cSim of ^ effecting a- dedicated 
' ^ conhectibn between tKe ' receiving means and the gcnerating-ineans. ~ - 

25 The dedicated connection would typically be a hard-wired connection and/or a 
modenuned coxinectioi^; Witii' tfie j^sSibility the coniiectioh been made via a cellular 
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: V telephone system. :.In other words, the. dccjicatpd Qpimefitiop isxapal^lp of fosQiing a 
channel of communication (from point to point). This is in contrasj^tA brq^dqasting 
of information through the air or ambient medium. The connecting means would 

..^ypip^lly.be-a modem at the receiving ^ipeans. - -:, :.o v^i-; :::: V:\ ;: : x-i 

r-r! tiron.'"!;' } Lew: 

5 Hence, in a closely related aspect, the present invention provides a broadcast and 

J- 

reception system comprising: . j : t:v?cs- : r> r. L . :r' 

means for generating a plwali^y of entitlemf;nt,:m^^^ relating tP .!E)roadcast 
programs; /. ' :,n:? _ \. ...n ' -dli::: : . r 

- t: nic^ns for receiving said messages fro^ ;^id geijerating^i^e^ a modem; 
10 and L . 3 ;t. : 

. ^ , means for connecting said modem. to said g^EE^ting m$^;i|}S:Suid;said receiving ; 
means. .^r:-^;:: ^/■u:^i~ - 

^ lie , above features can afford th^- advantage pfj providing /the u^er^ the necessary 
> : ;Vie>ying lauthprization (via the ]^M) more qi\iddyr,^jji^ ha% hith^^ 
15 partly because, the SAS (typically rUses ^ smallc^ ^oiint-pg €5o;BpMter3eo^e than 
the SMS, the SAS can operate more efficiently (and in real time), partly because the 
r; . SAS CM jtsclf, dircctly, generate the requisite E1SP4«5^^ can; 
be passed to the user or subscriber yia^ a dedicatj^ {t^}g^ 

•vrrsi v'Pr^f^rably, the generating jaeans^is coiuvfpte^tq ssudflfio^te S^gpHiiSpations 
20 server which is preferably included in or associated with said gene^^m^^^Qa^ips. 

The receiving means may be further adapted to receive said entitlement messages via; 
a satellite txansgcmder^A^ ^j.- - , ; jin; /'r i^-i :ol r -^r 

rT^ means fmay be^ a receiver>[decoder co^ for receiving a 

compressed MPEG-|ypQ sjgjial, mpan^ fpf decoding th&x^ody^^sigiaLto.^ a 
25 television signal and means for supplying the television signal to a television. 

; . Preferably, the receiyingjmeans is^ a<^ptc|4 tP^com generatiiig means 
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via said modem and comiecting means. The receiving means may comprise' means 
for reading a smartcard insertable thereinto by an end user, the smartcard having 
: - stored therein; data to iinitiatelautomaticaliy the trans of a' message ifrom said 

receiving means to said generating means upon inSCTtion of .tbe.smaijcard by the end 
5 user. 

i In addition, the syistem may further comprise ia^voice link to enable the end user o£ 
the broadcast and reception system to commnnicate,with the gcneratirig'jneans. 

..o -.r^ * \ Oil. 7 i."^ ' . [;■:. • ci ■*•( .n"'- 

It will be understood from the above that the* present invention provides two 
arrangements by which the time it takes for an end user to access a desired product 
10- is reduced. > Preferably- both arxangedxcnts are employed to adiieve^the maximum time 
saving but either arrangement can. bemused .individually. . \yr . i 

" AciGording^to :a ^further aspect of :the present invention, there is provided- a: broadcast 
v:A < and reception system, compriising; at the broadcast end:. r - . 

^ ^ a^broadcast system including means for broadcasting a callback' request; 
15 • and at the reception bnd:i i ;": :i . > 

: I a receiver- includingmean^ for ^calling back the broadcast system m. response 
to the callback request. r 

a; • 'By proVidSifg' ti^^ the* bioaddast system call Tequest the receiver to call it back, the 

possibility is aff^di^ ^>£ the bm^dcast Bystem obtainihg^i^^ 
20 about the state of the receiver. 

Preferably,'* the ^ theans^ for calling back i the broadcast v system includea: a modem 
connectable to a telephone system. By using a modemmed back channel, a simple 
way of putting: the inventi^^^^^^^ ? . . 

Preferably also, the means for calling back the broadcast system is arranged to transfer 
25 to the broMc^t ^femlhfc^ the Teceiver. This information might 

include the number of remaining tokens, the number of pre-booked sessions, and so 
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Preferably, t the broadcast system' includes meansiifotistaring Ihd^ that 
: it caii: be processed :at a later time, as desired / .-T-r: ^ ;> c- /utu^r- 

• ;o X *: 

Preferably, the broadcast means is arranged to broadcast a callback request which 
5> r- includes a > command ithat the^callback be made at a,igiveni tiine, :and the meaiis for 
. callingjback the broadcast. system is arranged ^t<^ resppnd to. said comiriand. By 
arrangmg for the callback to be later than the actual request, greater flexibility can be 
w: '.-imparted to :the system. \ mo: ,*:.v)<: '.r- '•!^* -i 

3fn^. T^eibroadcasting ^ans may be.arianged t05brQadcai5t^/the^e^^ 5:eq»est.onc Or ; 
10 more Entitlement Messages for ibrbadeasti ~ : j in: .ao- ltd t ^ 

c:<Preferably, the broadcast system includes. meamS for generating A:Ch©c*rtnessage (suchv 
as a random number) aiid passing this td.the receivers the .rccciveitincludes means for 
; : «iciypting; the check^ message and. passing Ihis; . to cihe .broadcast isystem, and the, 
broadcast system further includes means for decryptirigrthe chf^ek message received ^ 
l&joqififom the receiver and comparing this with tha.priginal jflje^k misss^Q. In this way^ 
it can be checked whether the receiver is genuine. .:^^uprl j :\ ..i 

a. : Miy of the above features may. (Oombiji^ tOggfljeibSi any 9|«?r^^tc cem^ation. 
v: W orfiiniey may also he^providedUaii. appropriate, inrmcthp<J/fiSi«j$^7r> ?s vjjfici ;2cq 

Preferred features of the present invention will now be described, purely by way of 
20 : :i example, with reference to the accompany mg'drawiiigSi in.rW ii ; - 

Figure 1 shows the overall architecture -of a digitalrtefevisjOBlsy^steni a^^ to the 
preferred embodiment of the present invention; 

-rv\;;: r . . . ■ :•: " ? . zts^.::: "ui* .G^ * 1* »:• •.:>'.. * . 

. ^ Figure 2 shows the architecture tifajconditiotial^^^^ 

*• cisystem; ' ' -y^ jiiiirlf:"^::; "lO li^-^.nr.- 
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.FiguTQ 3 ^show^s Jhe^ stnictute^Qf ..aji Entitlement Management Message used in the 
conditional access system; . . 

Figure: 4: is a schematic diagram of .the hardware of a Subscriber^Authorisation System 
(SAS) according to a preferred embodiment of the present invention; 

5 Figure 5 is a schematic diagram of the architecture of the SAS; • . ? 

Figure 6 is a schematic diagram of - a ^Subscriber Technical Management -server 
forming part of the SAS; 

Figure 7 is a flow diagram of the procedure for automatic renewal of subscriptions as 
implemented by the SAS; 

. . A - * • j . . - ' » i y J . ... i . . » 1 •.: V ^ 

10 Figure 8 is a schematic diagram of a group subscription bitmap used in the automatic 

V :renewaDprocedure;;^ r -^-w--: A 

Figure 9 shows the structure of ah BMM used in the automatic renewal iprocedure; 

Figure 10 shows I inr.djBtail the s^ r . 

v?i53 r;::..:^.:: s ck b-;;''vn :i! ^V.i: :c •^"i.;':^^ Jl. . - j-. irr 2''. 

*;j:r>;:Figu^e:l>l ib^a:sdiematic d^ order centralized'server when used ta receivc 

15;:^ commandSTtdirectlyMthiough communications servers; / . /rr ' : if,: : : 

.^Figure 12 illustrates diagrammatically a part of Figure 2vshowing one embodiment of 
'the, present iinventioHyO' 7 -z/i-'-j ^[i::: \aX^ 

Figure 13 is a schematici diagram of the order centralized server when used to receive 
I commands from :thei subscriber authorization system to. request a callback; 

20 i Figure 14 is-a?5cheMatie diagrau^ i , 
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• Figure 15 shows the manner in which EMM ehiissiotf* cyck' rate is^^^ 

to the timing of a PPV event; ; ^ • • - - 

-3, Figure 16 is a schematic diagram of a Message Emitter used to/cmit^EMMs;; . 

Figure 17 is a schematic diagram showing the manner of storage of EMMs within the 
5 Message Emitter; . v:i;:V. :u .z^ \ \. i 

; 1 > Figure. 18 is a schematic diagram of a smartcard>. :L : " 

Figure 19 is a schematic diagram of an arrangement of zones in the memory of the 
smartcard; and ' rrr-Ti ^ 

Figure 20 is a schematic diagram of a PPV event description. 

10 An overview of a digital television broadcast and reception system J:OQO according to 
the present invention is shown in Figure 1. The invention includes a .mostly 
.. .conventional digital television system 2000 whidi:. usesirfthe/ kho^ ::MPEG-2 
compression system to transmit compressed digital signals. In more detail, MPEG-2 
compressor 2002 in a broadcast centre Teceives a;idigitaibsignal vStrea:m (typically a 
15 stream of video signals). Hie compressor 2002 is connected to a multiplexer and 
r - ,:scrambler-2004 by linkage 2006- Th'e'mult^cKer;2004ji:eEeiYes:a>plutality:ofi^ 
input signals, assembles one or more*: transport: streamsii^odictoadsm^ 
digital signals to a transmitter 2008 of the broadcast centre via linkage 2010, which 
.r . can of course take a wide variety of-formsIindiKiinglxiecamilink^:' !rhe .transmitter 
20 2008 transmits electromagnetic signals via uplink 2012 toynards a sateUite transponder 
2014, where they are electronically processed and broadcast via notional downlink 
: . : i.2016 to earth receiver 2018, conventionally inithevform ofia dish.owned or rented by 
the end user. The signals received by receiver -201&are tiansmittcd: to. an. integrated 
receiver/decoder 2020 owned or rented by the end user and connected to the end user's 
25 television set 2022. The rcceiver/decoaer;,20202dcfcades^rthc^^ 
signal into a television signal for the television set 2022. 
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' A <x>nditiohal. access i.s^^ is connected to rthc multiplexer, 2(W4 and the 

receiver/decoder 2020, and^is Jocated partlyiin, the broadcast centre and partly in the 
decoder. It enables the end user to access digital television broadcasts from one or 
'^nnior© broadeast^suppliers^ A smartcatd, capaWe. of decr^ to 
5 - bomniercialf offers^ (that is, one, or several television programmes sold by therbroadcast 
^ supplier), can be inserted into the receiver/decoder 2020.; Using the decoder 2020 and^ 
smartcard, the end uscrimay purchase events in- either a subsOTption mode^or a pay- 
per-view mode. 

- * Ah interactive - system-' 4000,/ also /connected^ t6,:^^^^^^ the 
10 receiver/decoder 2020 and^gain located partly in the broadcast centre, md partly in 
the decoder, enables the end user to interact with various applications via a 
modemmed back channel 4002, , -^i . - h r 

The conditional access system) 3000 is : now described in ^more detail. , , . ^ 

- -' With reference to^ Figure'2; in loverview the conditional accegs system 3000 includes 
15 a Subscriber Authorization System (SAS) 3002. The SAS 3002 is connected to oi^e 
or more Subscriber Management Systems (SMS) 3004, one SMS for each broadcast 
' ssupplicr/by a'rcspective TGPT-lP 1 ofJinkage could 

- r. alternatively be used). Alternatively ,\Qne: SMS CQuld be shared between two broadcast 
5 : AiY b siuppliers,W^'one «app'l^ two SMSs, and sq on: ^ : - ; ^ 

20 First encrypting units in the form of ciphering units 3008 utilising "mother" smartdaids 
3010 are conriected to tiie SAS by Jinkage;3012. Second encrypting units again in ^e 
' " foriri of- cipheringuunits 3014j utilising OTQthej smartcards 3016 are connected to the 
multiplexer 2004 by linkage 30i8i ; The jcceiyer/decoder 2020. ;^eceiyes.a,"^ 
smartcaVd 3020; It^is conhected:directly to thevSAS 3002 by Communications Servers 

25 * 3022 via* the raodemnicd :backi channel 4002: r :The SAS sends; amongst other things 
subscxiptibn fi^ts- t6Cthe> daughter smartcard on request. . r 

The smartciafds contain 'the irsecrets- of one or .more commercial j)perators. The 
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"mother" SHiartcard bncrypts different kinds of iSaessages and the.'Waughter''' smartcards 
decrypE tte'^messagesi, if they have the rights «vdbso;r. .• £.)•: nSo ;:,: . 

liie fiftt -and^sedofad:dipheririg-ti^ts-3008. and 3^ cemprise arrack, -an electronic 
■^VWfe-eard with software stored an ^PROM. up fo:2axt«actronic icarda and one; 
5-^-'^ 'smirtcaid 3BI0 and 36l6'-r6spectively/for-each> dectr6hic:catdp<!>na<c4ri^.3Ql^) for 
-':--^e&icry|^^ fee ECMs aiid (Jne (card 3©tO).fer enoryptinglhe EMMs. ,fc : ■ rrr 



The operation of the conditional access system 3000 of the digital television system 
''^^^ -wfll feo>V bfi described iff More dkiil-:with>refeienpis tb the.yaiious domppn.^nls.'pf the 
"^'^eleviSfoh systcm'2000fand the obAditional access, syftem.3IX»ii xjds.' v.- / r 

10 Multiplexer and Scrambler .D>> '•>rj.Si-.^ •.-.•so Laar.-ric- f:a 

With reference to Figures 1 and 2, in the broadcast centre, the digital video signal is 
first compressed (or m rate' reduced); iKing theTMPEG?-23COifapfeSS0r Wl- This 
compressed signal is then transmitted to the multiplexer and scrambler 2004 via the 
linkafee 2D06 an^oider to-Tie multiplexed with otlKr?data;,SBch as-^Qthej-cQmeressed 

l$'^>^'*data-" ■ ■ • •■ --^r^cs- ■ c: 

'-i^' ' ^ scrambler gener6t^^' control Wbfd used iri4KLSa!aiBbKo&pco<jes^:^^^ 
-.--bs.g^:^e NIPEG-2 str«^ in the fadftipkxe^f -iOOArririaic (tontrob ^©rd;^ generated 

internally and enabl«5s* the «nd user's integrated iecei^fBiry^«¥CQ<leR.^^HP 

the progranune. 

Aa^^s criteria, indicattrig how the prp^amme 1^ <a)niaaCTCja added to 

•■^ ' thir MPEG-2 stream. The- |>ro|^&mme may b&.Coame$dali$edi^' either- one of a 
' - •! ^nuiidjer of'-subscnpfiori" modes ^d/oc 6ne^ ofia rimriber of i-Tj^y^Psi Yiew^! (PPV) 
-tiibdes or events. Bi the subscription mode; the, end-usef(S\?bifjpjibe§ to^,on6 or more 
^ ~ ■ commercial offers, or:%Oi«iUets"; thus getting theirigbtaile:^^ eyery channel inside 
25 those bouquets. In the ffteferre* «^bodjmealteup?.tQ.a60rcoB»>ierQial may be 

selected from a bouquet of channels. In the Pay Per View mode, the end user is 
provided witfi'the capability to pUrcHase^cvcnts as:he:wisbes.. This, can be; achieved 
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by cither pre-bbokiiig thfe Weilt'iii advance ("pre-book mode"), of by piirchyiiig the 
cveiif as sbbii as^ft is bfoaidc^t ^ inode"). In the prcfcited einik)diiiient, all 

users' afc 'Wbsdfibers; \vhethef df Wbt they watch in subscription or PPV riiode, but of 
course PPV vietvers need hot nec^^ 

5 Both the control word and the access criteria are used to build an Entitlement Control 
Message "(ECM); this ii*a inc^sage sent in relation with'bne scrambled program; the 
message' cbriUih's a' control A^bird (\Vhich'allo\vs for the descramblihg of the program) 
and the access driteria of tlie broadcast progi^^. The access criteria and cdiitrol word 
are transmitted to the second encrypting unit 3014 Via the linkage 3018. In this unit, 
10 ari liCM is 'gdfrieratfed/ cisbypteti atod traiiSriiitted oh to the multiplexer and scrambler 
^'^^ ^ 2004/^ ' - ■ • ■ ' • ■ ^ - ■■• ^ ' 

Each service brbadcast by k broadcast supplier in a data stream comprises a number 
df distinct cbmponents; for exarti^^^ a' telbvisicin progrcimme includes k video 
component, aii audio 66'mponeht, a sub-title component and so on. Each df these 
15 componeritk bf a' seWice is s^aniibled and encrypted for' Subsequent 

broadcast to the franspondef 2014. In respect of each scrambled component of the 
sen^ice/a separate 'feCM is rc^ ' ^' ^ ' - : : 



r: 



Programme Transmission 

The multiplexer 2004 receives electrical sighals comprising- encrypted EM^^ the 
id *' ' Si^iS^dS^f'enar)^ the s^coh^ crfcry|<ting tod icompresscd 

programmes iOrom ' 'tii'e' conipre^df 2002. ' 'The multipfexer 2004 ^craBbies the 
programmes aiid'^^^ the encrypited EMNI^'and the 

encrypted ECl^s as elecfnc^ to a transmitter 2008 of the broadcast centre via 

linkage 2010. The transmitter 2008 transmits electromagnetic signals towards the 
25 * satellite transponder 2014 Vik^^ \ " • : - 

Programme Reception v - 

The satellite transponder 2014 receives and processes the electromagnetic signals 
tian^itted by the trahsniitter 2008 and transmits the signals on to the earth receiver 
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2018, conventionally in the form of a dish (^vsjned^or jei^tpd by.Jh^ pnd u^ier» via 
4Q>vnlixxk 201.6. The signals recpiv^ed by .recciyer J5pi8 ,3urc. |iBiKniittjcd t^ the 
, , jn^egrate^ rccciver/(3Lccodcr 2020 pwncd pr i;c^nted, ,by to 
the end user's television. , set 2022. The, rcceiyer^iief^Oj^er 20^ 
5 signals to obtain scrambled programmes with encrypted EMMs and encrypted ECMs. 

. the programme is not scrambled, that is, no EpjM.b^^^^ transmitted with the 

. . . MPEG-2 streain,.the recejver/decoder 2020. dqcpipi^re^s^ the 
.^.^^^ §ig5al into a video signal for trai^^jissipn to television, set ^2022. : - : 

P,!..j. K the programme is scramblpd, the t?Cfjyer/dpQX><3^r,2^^^ c^tractj^thj; po^gppQnding 
10 ECM from the MPEG-2 stream and passes the ECM to the "daughter" smartcard 3020 
of the end user. This slots into a housing in the receiver/decoder 2020. The daughter 
_ smartcard 3020 controls whether tl^e,pnd,user .ha$ the jight tp, decrypt the ECM and 
: ; to access the prpgramni^. If;nQt, ; ?t negatiy^ status is i?^^^ the y^peiy^r/^^coder 
^^0^0 to indicate that the p^Q^^amme qsJippt be descr^];^^ If^the ppd u^er does 
15 hav^ the, rights, the ECM is decrypted . and the control,word extracted.. The decoder 
, , 2P20.can th^^ descramblc the programme using this control wprd^ ^The MI?EG-2 
Stream is decompressed and translated into a video signal . for onward transmission .to 
television set 2022. 

:^ m^ages, amongst otheK;,. of the end4is,er files, cpmnmercial offers ^uch as tariffs 
r and promotions), sul^^criptions, PPy, details,juid data regarding end user (;pnsump 
_ . _ and authorization.. The SMS.maj^^fee physi<^Uy rei^pte fr^ ^ 

Each SMS 3004 transmits messages, tp the jSAS 3QQ2^ Ma ,re^ linkage 3006 

25 which imply modifications to or creations of Entitlement Management Messages 
(EMMs) to be transmitted to end users. -rolv^rjv > *^ 5 

The SMS 3004 also transmits messages .to the SAS 3002 which imply no 
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.J , .modifici^tidns. or creations; qf E^ilMs :but ipiply. only a chang^^in an end .user's state 
(relating: to the,mjth9n2^tion granted to Jhe cnd^ user when pr4ering. products or to the 
ampunt^that the end user ^ :^ " : : \ ^ " " " 

As described later, the SAS^ 3002 sends messages (typic5|lly requesting information 
5 such as call-back information or billing information) to the SMS 3004, so that it will 
be apparent that communication between ^the twopi^,two-way . . . , . , ; 

Entitlement Managemetit Messages -fEMMs) , : . - - j; 

The EMM js a message dedicated to. an irfdividual e^d user (subscriber), or ^ group 

of end users, only (in contrast with an ECM, -which is^decJicated.to on^ 
10 programme only or a set of scrambled programmes if part of the same conunerdal 

offer)., Bach group xMy contain a given number of end users. ; as 
; . a groupr,aims at pptimdsipg ;the bandwidth; ^^t is, access to one^^group- can permit the 
; I, //reaching of % great n^mber^t end us^ jv: -rj y ot 

Various specific types of ;EM]\^ are used .in putting the present invention into practice^. 
15 Individual EMMs are dedicated to individual subscribers, and are typically used in Uie 
provision of |?ay-Per yiew scryi^ contain^the group ifientifier and the position 

i i of the i^^bsCTber; ip^.t^^ 
to groups^ of, say, r25§:^ 

some subscription services. This EMM has a group identifier and 'a^sul>scribers' 
20 , group bitmap. Audience EMMs are dedicated to entire audiences, and might for 
. example rbe u^ certain free^ services. ,An 

, "audience" is the bear, the same 

y., Operator Ide5tigerr(OPI^ addressed to the unique 

. : identifiM of the sijiaitcaufd -i:.r : « ^ .:' **. 

25 . The structure , of typical t EJV^ is now described with ^referenc^, to , Figure.^ 
iBasicaliy, j^e ^EMMi: which; is implemented as a.s^ries of digitaj data bits, comprises 
a header 3060, the EMM proper 3062, and a signature 3064. The header 3060 in turn 
comprises a type Jiden^ficr^ 306^ identify whether the type Js individual, group, 
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-audience or sonic other type; a length idcntififc? 30e8''which gives tiie length of the 
* " EMM,'an optidriai-addreSS 3076*for'^hfe -EM^i^/'a^ -t^ a key 

identifier 3074. The EMM proper 3062 of c6ufse V^es'^greaflj^Scdofding fo i type. 
Finally, the signature 3064, which is typically of 8 bytes long, provides a number of 
5' ' s -.chcckSi Against-^dfruptfdn tof the temaining dafS 'ii^the^EMMr ■ - ' ^ 

Subscriber Authdrizatirifl System (SASY - -''^^^^-'^ ^ - - ^ " ^ 
The messages generated by the SMS 3004 are passed via linkage 3006 to the 
Subscriber Authorization Systcin -(^Asy^ 3002; ^«4Hd^ 
•r ' iaclmowleyagfiig receipt of the messages generated Iby^ thcJ S"MS 3004 and pas&s these 
iO'^'^admbwlcdgcni^ I^:.-r *i) . i j - 

■ • ''^ -As'ghefvvn^ at the? hardware level the^SAS -c6m|flpTses in ^Siown^faishion a: 

• ' "inairiframe ccnipiiter 305G (in the prefeire^ cmbodin^ DEG machine) Connected 
to one or more keyboards 3052 for ^atsf iid <^6mih^^d^^^i^ 6ne or ihdre Visual 
Display Units (VDUs) 3054 for display of output information and data storage means 
f5'' "3(356! Some reduiJdancy inShaiywdirc may be p^dvided. 1 - < 

Ifevcr'thc J^AS mnsi iri'^he Jireferred^^bodi^ on =^a standard open 
o: / wfS!^3 opejrating system^ a siiitc^df softwafe^hSSfe^diiidciuf^'^^^^^ in 
^J • bVetvieW with refeiencc: to FigiM:e*=3; irwflPbfe uiidfifetbod could 
- aKerativbly be lipienicnted in^i^d^c; -'^^ -t^^lw^i:^': cr^o^ 

'"25 in overview thfe SAS cdtnprises'a- Substniptidh- for 
- ^ ' -subscription mode artd-td'rene a' Pay Per View 

diairi area 3200^0 give rights' for Tl^^even^^ a^E^M^mjedor 3300 f dp passing 
EMMs created by the Subscription and PPV ch^m -areas- tc) - the multiplexer and 
scrambler 2004, and hence to feed the MPEG stream with EMMs. If other rights are 
'25 " - to be granted, sucti' as Pay Per Pile (PPF) rights iB-'the case 6f downloading computer 
' * '^»'^^!' -"software to a user's Pdrsbnaf Gbmiiutefj other simil^^are^-^e-afed 

One funttion of the SAS '3002 is ta ni&ige ihe'^afcce^^ rights to" television 
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.... -programmesy available. as-ro in subsGriptibn mode or sold-as PPV 

^ - ev.ents. aa:o^ding jo . different- conunercialisation (pre-book niode, impulse 

f mode). . piie.SASr 30p2> aocqrding to those rights and to information received firom the 
-y: :v:SMS:3004>; generates EMMs for the. subscrij)er.: _ ^ ^ - . : : ,n 

5 The Subscription Chain area 3100 comprises a Command Interface (CI) 3102, a 
Subscriber . Technical Matiagem.ent (STM) server 3104, a Message f Generator (MG) 
3106, and the: GipheriSg 

' \\ }\:'''} :. ' yri\ • ;^ • .y.y; . 

. The PP\^ Chain: are^ 3200. comjp^ Authorisation Server (AS) ;3202,:'a relational 
. database ^3204 for storingf relcymt details of :the end users, a Ippal blacklist database 
10 . . 3205, Database Scryeis 3206 for the., database, aii Order Centralized Server (OCS) 
: 320.7j a Server for Programme iBroadcaster (SPB) 3208, a Message Generator (MG) 
3210 whose function iis basically: the same as that fpr the Subscription Chain, area and 
is hence not described further in any detail, and the Ciphering Unit 3008. 

>: . The^ EMMiJjycctor 3300. comprises a plurality of Message Emitters <MEs) 3302, 3304, 
15. . 3306' and 33.03 an4 Software Multiplexers (SMUXs) 3310:and 3312. In the.preferred 
, ^embodiment, theric are twp Mj&s;,3302^^and_^^^3 for the Message Generator:3106, with 
the other two MEs 3306 and 3308ifor the MjgssagQHGenerator. 3210. MEs 3302 and 
3306 are connected to the SMUX 3310 whilst MEs 3304 and 3308 are connected to 
v^; c:athfc:SMIJX-3312; Kj-^rr j - ^ - u ■ " 

20 V' Each'bf the threeVmain cOmponentis otthe SAS (thc-Subscription Chain area^ ihe PPV 
^ : . ; Chain area ;and the EMM Injector) are now .cpnsidered.an more detail. - 3 . 

Subscription Chain; Area - : > m *i \ - 7 

Considering first the Subscription Chain area 3100, the Qinmia^d InterfaGje:3102 is 
primarily for despatching messages from the SMS 3004 to the STM server 3104, as 

25 ; Well as ta the: OeSf:32D6>-9nd from the OCS to the SMS;. The Conmaand Interface 
f . ; tak^^^as input from .:the.; SMS :.eithct dirct^i pommands or batch files a>ntaining 

: - . .a)nimands..ilt 'performs syntactic analysis on the messages coming from. the STM 
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^ ^ervetj and is able to emit -accurate mesisageS^^en^aA'ti^or occu^^^ 
• ' (parameter out of range, missing parameter/ aflQ So'iMi)r4t ti^c£s 'incoming* i^nimands 
* in textual form in a traicc file 3110 and aliSd in'binsJry form in ^ replay file '3112 in 
order to be able to replay a series of conimlands^ Traced <^-be disabled and the size 
5 of files limited. 

r lA'i-' .7 . . . . . -.. - p* . . . 'c.r -'C ^ 

[O > Detailed discussion of the STM server 3104 is'aow pr6videii With'^paftichil^^ 

to Figure 6* The STM server is effectively the main engine of th& Stibs^cription Chain 
area, and has the purpose of managing free rights, the creation of new subscribers and 
' r i ? the -tenewal of existing subsdribers: As showi^ in the figure, commands are passed on 
10s ^ rto the Message Generator 3106,-^albcit in- a diffiient^fbrmat -from -that in which the 
f o::^'\ cdmmands are passed to the STM'serVer. For eacfi ^fOminanc^^the STM server is 



• ; arranged to send an acknowledgement nieSMge td'^th"^^^^ the ^relevant K-.:^ 

j:- command has been successfully proc^^ed-aiftd sent t« fee- - ' . 

The STM server includes a subscriber database 3120, in which all the relevant 

15' ' paranietcrs of the subscribers are gto^d (smartcatd'flumbef,"coit^ state, .^^^ W 

1 r . : ; group and p6sition4h the group, arid so On). ' "Tht datable© performs^ seifiaiitic checks % 

;ii / : of the commands sent by the CI SlOl^agamstltheTirdrifettt^^ the datafease> ~aiid updates \ 



^r.^ n: ttie database when the c<Miim2ina^-kc ^ V tm. ^.0: ^ .-3 o'^-i -J:: :fU 

The STM server further manages a First In First Out (FIFO) biiff& 312aJJ)ctwecn the 
20 STM server and the MG, as well as a backup disk FIFO 3124. The purpose of the 

VHl - FIFOs is to average the ?flow of cbmmands^^ &om^.tbe/GarifcthcJMG^^ 

respond for a while for any ireasl)n; "Kiey can 'also! erisiii© that^n the case^of a crash 
of the STM server or MG no command will be lost, since the STM server is arranged 
to empty (that is, send to the MG) its FIFOs Mhm^ltesferfiedU'TMi: FIFOs are 

''25- implemented as files. -5 • ^ • -s^!.: ^ovnr:::.:>Cij^ .^rf: ,^nr:; :: ' 

! J-' . • ' . ■'. 7. ^c^/^f^^:^ I ^.x^br-iiq^C':; * t ^ :* 

: : ^ .-.f.tlie server infcludcs;-"at its *cord' an' aut0mat$clre^ 3136 which 

V. :r.^ automatically generate renevWds; aria, if»icquiac6dby:;thc opeiators, free rights. In this 
; 'context, the generation of renewals may bcdhotight of ^as^^kicluding . the generation of 
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:f' rights for the first . time^^ al^hough^it will: be understood ^at the; generation, of new 
.rights is initiated at the SMS>-^ A^ become, apparent,, the -two can be treated by 
roughly, the same.. cqmniands . an : ^ ; c : v ^,^. 

Having the STM separate from the SAS, and the automatic renewal server within the 
5 ;. SAS jathej than (in:,kno^n fystems) in the SMS 3004, is a p^cularly: important 
feature,- $ince it can significantly jeducc^thp nun^ber of conun^ff ids >vhichi:need to be 
passed frpin the .jSMS tQ the SAS (bearing in njind ih?X,th^, SMS Md SAS may be in 
different locations and : operated by diffcrcait operators). In fact, the: twp. main 
commands required from the SMS are merely commands that a new subscription 
10 >should b^ smarted i^d that existing subscription should be.stppp)ed (for-exziinple in 
. . the case of non-paymj?nt)g By minimising comniand exchange between the SMS and] 
, SAS, thC; possibility of faUure linkage 3006 between the 

two is reduced; also, the design pf^the. SMS; does not need to :take into, account the 
features of the conditional access system 3000 generally. 

15 Automatic renewalcfi^oQeeds in the fashio^^indicated in the flow- diagram pf Figure 7. 

In order to reduce bandwidth, and given that a very high percentage of all renewals 
• are standard, renpwal,prQcee.ds;in groups .of subscribers; Jn the preferred .embodimente 
■■: u there. ^e.256^indiyidual subsprib^ts per group* j '^ie flow diagrsun begins wi^h the start 
step 3130, and proceeds to step 3132>where,, a mipnthly activation of the ^irenewal 
20 function is made (although of course it will be appreciated that other frequencies are 
; 'alsorpossible)^.' frequency, ri^ts -arergivejt-to jthe. end usejjfor the 

r . rcuirent mpnth; a mpnthi at which point they expire if not 

. h,vv renewed;; V:v::; z-z-^Hl--: -Ui^'- -t . ^ . : - r. . , y_ • • 

In step 3134: the:iSUbsjOTbct 312QJs acccssjed. in respect pf es^ch grpup and 

25 each individual within that group to determine whether rights for the particular 
^ . individual ^ure tOLibc reneWedv s t;. ^. - y: r ■ ^ r". 

'■■'^ y - y oar hrr-^^ih \i 01/;^ 't-r ■ • - ' - 

V * : In step 3136, a group, subscription bitniap is set }up acpordkig Jo the contents of the 
subscriber database, cas^ shown in Figurc:8: riThe bitmap comprises a group identifier 
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: (in thisicasc Group I - "GI") 3138 and 256 mdividuaPs^^ 3140^ The 

individual bits: in the 'bitmap are set to 1 or-zerSUccdrBing ^O' whc^^^ the 
particular subscriber is to have his rights renewed; ' Ai typical set of -binary data is 
shown in the figure, 

5^^;::^iIn stgFK^Mja the apfjropriate commands, includiiig the group subscripion ^bitmap, are 
- "^ ' passed to the MeSSSigS Gciierkfbr 3106. In step 3143 the Message Gdherator sets an 
: obsofesceric'e date to indicate to the ^martcard the date bc^^ 
cix: subsca:iptidii*^MM is riot valid; typieally thiS date 5s Set as the end of thfrnext month. 

i: -^i . Ifr Step^3jL44 the Message' Generilbf generates froiftHbc cornmaHdS^a^roprialc group > 
liET^ " sul)S?^ptioii EMMs and a^ tHe^Giphferihg Udt 3008^ to' dicier thS EMMs, the 
' v. ciphered ^EMMs-b^iftg thcn^^assed-to-tfee EMM Mjec^^ step-3146; 
iigects the EMMs into the MPE&-2^Sdta^strc - v tc-r - . r 

Step 3148 indicates that the above described procedure is repeated for each and every, 
v V groUp. The pit>cess te' finally ^Ijrought' to ^to eftdiat stop St^p 3150;^ i : ^^J u 

15^.^1 ..The : flow diagr^. described^ '«boVt<:with-^«fetena^' tDi in fact 

" t ^i^jfcttffically to^he renewal of siib^ptionS. The StM itedP ftiabag^ in a sinailar way 
^ -/^a%efcaudi<*c6TightS and ncw^s^ 01 zbooociq brr:: : ■ 

:./1t .o}is; th&;case of -fre6^ aiidieiicfe^ rights; avallabid'^fbrnSpecificUWevife*^^ or 
^oa groups of such programiridS, the^e are made available'by thd^ST^ 
20 to the Message Generator to generate appropriate audience EMMs (for a whole 
audience) with an obsolescence date a given number of days (or weeks) hence. The 
.2--^ : : MG computes the precise obs^lcscebce date' bascd^^^ • 

In the case of new subscribers, these are dealt within two stages. i=iretly^ on purchase 
the smartcard m the receiver/decoder 2020 (if desired by the operator) affords the 
25 subscriber free^rights for ^a ^given-period^(typic^y:a>fewida^^^^ t'Tliis. is^chicved by 
"generating a-bitinap for thevstlb^cribcr which lincludcS the :relevant:obs61esccnce date. 
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... , /nie subscriber. then passes^^is. ppmpleted paperwork to the operator ix^maging the 
. ^ subscriber:(at t^e,SMS)v : Once^^t^^ paperwork hasjoe^en processed, the SMS supplies 
. to the S AS , a start, command for that particular, subscriber. On receipt by the SAS of 
,^ the start cpminaiid, the ^TM comniands tlie Mp to assign a unique address to the new 
5 , . subscriber (yvith a particular -group number and position within the group) .and to 
. generate a special, so-called "commercial offpr'' subscription EMM (as opposed to the 
pfiore usual "group" subtsqription EMM use<i for renewaIs)..to provide .thc^particular 
. ^subscribe?: with righjs,until tfec end of the next month. Frona this ppint renewal of the 
, suta>$criber ocqur automatically as described above. By this two stage process it 
10. ,is possib|le Xq. gi}anf . iiewT subscribers rights until the SMS issues a stop command. 

It is to be noted that the conmiercial offer subscription EMM is used for new 
subscribers and for reactivation qf^existing subsoribers. The group subscription EMM 
. is used.fpr reijewal and; susjjeM^ . - 

, y^ith r^ferei^ce .to Figure^9, a typical, $ubscaip,tion EMM, proper (that is, ignoring the 
1$. , b^jadei; and.s,ignatur^) genera^^ the above procedure comprises the following main 
portions, namely typically a 256 bit subscription (or subscribers' group) bitmap 3152, 
128 bits of management ciphering keys 3154 for the ciphering of the EMM, 64 bits 
; - of^ eaph ^xplpitatipn dp^l?ril;^g ke^ tq enab,le the smartcard 3020 ,tq. decipher a 
, : control wond Jo prqvide acoejs tq broadest prqgranu^acs, and 16 bits of obsolescence 
20 date 3158 to indi$ate4he- dat^ beyqn will ignore the. EMM. In 

fact in the preferred embodiment three exploitation keys are provided, one set for the 
present mpnth, one, s^t. for J thp.nex months and one.for resume purposes inithe event 
i of system failure; .;^.>^/ , - . . , . ;« ^ , > . -r: 

. mpre. detail, EMM proper has all of the above components, 

25 e^,cept the^ management ..c^jheimg ke^S; 315^^ : The. .conamercial^o^er subscription 
. EMM proper (which js. for .an .individual subscriber) includes instead . of the full 
subscribers' group bitmap 3152 the group ID followed by the position in the group, 
and then iqanagempnt .fjphepi^ kpys 3154 apd three exploitation keys. 3 156, followed 
... by the relevant obsolescence jdate. 3158. . , 



BNSDOCID: <WO 98434geA1 I > 



wo 98/43426 



PCT/EP97/bii08 



"•-21- 

' tI *The-Message Generator 3106 serves to transfoWhri"Commarids 'issU^ by the STM server 
' "'3104 into EMMs for passing to the Message-EtaitYeVs With reference to Figure 
^ ' 5," firstly, the MG" produces'" the EMMs proper and passieis theiii td thfe 'Ciphering Unit 
V. A. 3008 for ciphering with' respect to the niana^ement and exptoltaltidii keysr The CU 
5 ^ completes the sigjiAture 3064 on thb SMM (sec iFigu?e 3)* and piasses the EMM back 
- ' to'the-MG, where the header 3(560 added. The SmMs which are passed to the 
' ' • ISiessage Emitter arc thus complete EMMs. The 'Siesl&j^fe Geneirator ^s6 determines 
the broadcast start and stop time and the rate of emiskiOii Of die EMM^; ^d passes 
' - these as appropriate directions along v^ith the BMMs to the KddS^^^^ The 
10 • ' MG only generates a given EM^^ once; ir is '^fie' NiE" which pl6rfofin's its cyclic 
transmission. 

' ' ' A^ain with reference to Figure 5, the Mess^e-^feiiirotoF includes its own EMM 
database 3160 which, for the lifetime' of the rel^aiit EMMi'^stb^es it. It is erkscd once 
its emission duration has expired. The database is used to ensure consistency between 
15 tlie MG and ME, s6 thaf for exaittplc wheri^Sn^^n user TlS'^^feiidfed tHe ME will not 
.-coAfindc to send renewals, til tiSis regard the' 
'^ -^ md^rids'tliem^ the^^^ " . i^^ . : a vi-i^^^^ : o .;q 

K r- :%>Oxi generation of ab EMM, thc^MG' assigns a uriixiuc id'^tTfl65r trf the feMi^I - When 
xv:co;: jii^g:ii^G. passes the* EMM to^^^tKe" MS; it^alsd ^asscis tWWiM/^J ^Tlii's- enables 
2^ ^^"idBntificalion of a'^pkrticiilar EMM at botfa^ttie^l^^antS^tlfe' 1^:^ • '^^ 

^^sq concerning the Sub^c^jptioti'<:fia^^ incfiides two 

FIFOs 3162 and 3164, one for each of the relevant Message Emitttrs ''5302 and 3304 
in the EMM Injector 3300, for storing the ciphered EMMs. Since the Subscription 
Chain area and'EMM InjeAof'may ^fe'^a si^ificaiiV^dfetkKe a^irt^^ of FIFOs 

25 ' - 'can al^^^^ in EMk tr^ani^sibtf^cv^^^ 3l68 

' between the tWd'fail. Siifailar I^FO's are'prbvBed'in%fe^^^^^ area. 

^ One particular feature of the* Mbssage <5^ri^rat6r ^in^ p2urtic^^^ the conditional 

access system in general concerns the way^that it ' reduces th^^ length of tfie EMM 
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proper 3062 by mixing parameter length and identifier ta save space. This is now 
described :y/itb reference to; Figure .lO which- illustrates an cxempl^ EMM (in fact 
:> . nca PPyjEMiM, which is the simplest .EMM). The reduction jnjcngth occurSr in Pid 
' ..(Packet or 'T^ameternidentdfiej) 3170; .This comprises twovportions, the actual ID 
5 3172, and the length paaramcter[ for the packet 3174 (necessary r in; order; lhat the start 
of the next packet can be identified). The whole Pid is expressed in just one byte of 
. infornjation, 4 bits^Jjeing fcserved.fof the.IE)^..and foijr^for .thd length. Because 4 bits 
; is not; sufficient tO;: define the.. length ^in true^binary fashion, a different corre^ppndence 
between the bits:and:(thc acUial length is usedl,^this c^jrespondence beifig :^presented 
10 in a look-up table, stored in storage area 3178 in the Message Generator (see Figure 
^ S)vi Tbe cprrcspojidci^ee is typically a? follows:- - , 

0000 -X i.vr . ' : . 

0001 =1 

r.. ^0010 ^=v ';:;2.:.c:. ::; . . ■ . . :T 

15- ..irr. -i. -> :-.-00H:; =; ;;r-b3 'j- I : 

0100 = 4 . : . ; 

0101 =5 

.-^ 011©.::==-^ .:;6 ■ : ■ : ■ . . , .! 

..T. -I'.-o .-XI, e:: cm . i7.:w.T- . - - - .-v.-;. 

20 1000 = 8 ^.f. : , ■ . Acrr 

1001 = 9 
1100 =12 

25. ;. f.:- • j .iiei:;;;=>r T^^oie . • • ' - ^ . .y- j • • - : 

1110..:^e .^24 J V" ^ - . . .vv/ 

nil = 32 

Itowill be :seen:that:the(lbngtfa':param^ercis ;not (di^ to the actual 

tength of the .paGket;(the^relatidnsfaipis in:part>more 'quadratic rather than linear. This 
30 allows for a greater range of packet length. 
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Pay Per View Chain Ai^ea » ^ -j[y \r- ' ,^ - i 

• ' Cdrieeraifig' the Pay Per View Chdin arcaf3200{i^fth 'ref6if©nee <6 Figarc'S ih more 
r dcT^iS the Authorisattoii'^ervef ' 3202 ha^ as- itS5'4*itiit the Order Centralizea Server 
CI i . 3207, ' whieh » requests-^ ififoimStioii abOutf ofcach^* isubiscribfeV wBich' * eonA6cts4 to the 
5- ^€omitiunic5tions IServefs^ 3022 ttf purchase* a^^^^^^ " ' ' ' 

ID t*;* ' yy^l '\ . ^ - v\.raj::;r o :^ 

- K tha^bscriber is'knoWn fi^om the^AS 3202/^'sm of ^nsactidhs takes ^ place. If the 
^ sulpscribef is'authorized'for the order, "the ASfea^tds ^bill at>d' sends if^tb thNr OCS. 
L J y. Otherwise, it signals 'to'^fbe ©CS.that the didef is^^ibt aiifhkm^p' * 

It is only at 'the end of this set' bf transaction^ that tl^e AS Qpdateis tfie end users 
10 database 3204 via the database servers (DBAS) 3206, if at least one transaction was 
authorized; this optimizes the number of database acce»esv-' * " 

~- ^ 

The criteria according to which the AS authorizds purchase arb stored in the database, 
accessed through DBAS processes. In one embodiment, the ^tabase is the same as:^ 
the database accessed by the STM. ' • 

15 Depending on consimier profile, the authorizatidh'^ may be denied 
(PPV_Forbidden,Casino_Forbidden ».)• These kind of" criteria are updated by STM 
3104, on behalf of the SMS 3004. ^ > ■ i ^- 

:::: lOOl 

Other parameters are checked, such as limits allowed ^or (purchase (either by credit 
card, automatic payment, or number of authorized token pbx^hases per day). 

20 In case of payment with a credit card, the number ofnhe/ card is checked against-'^ 
local blacklist stored in the local blacklist database 3205. r : , 

When all the verifications are successful, the AS:- 
£. . 1; Generates a bill arid sends it to.thc;XDGS^; whidrirdm'pletesithis bill^and stores 
: it in a file, this file ^being' later sent to ; the*- SMS^orjprocesdng: (customer actual 
25 billing; and . . i-sr,/^-:, - 
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2. Updates the database, mainly to set new purchase Jimits. 
. This check-Md^ mechanism applies for each cornmand a 

subscriber may request during a single connection, (it is possible to order e.c. 5 movies 
in a single session). 

5 It is to be noted that the AS has a reduced amount of information concerning the. 
subscriber, by comparison with that held by the SMS. For example, the AS does not 
hold the name or addrejss of the subscriber, On the other hand, the AS does hold the 
smartcard number of the subscribo^^^ subscriber's consumer category {so that 
different offers can be made to different subscribers), and various flags which state 
10 whether, tor example, the subscriber may purchase on credit, or he is suspended or his 
smartcard has been stolen. Use of a reduced amount of information can help to 
reduce the amount of time taken to authorize a p>articular subscriber request. 

The m^ain purpose pf the PBA$,s 3206^ is to increase database performance seen from 
_ . , the AS, by paralleling the accesses (so actually it does not make much sense to. define 
15 . a configuration with only one DBAS). An AS parameter determines ho^y- many 
_ DBASes should connect. A given. DBAS may be connected to only one AS. 

The OCS 2307 mainly deals with PPV commands. It operates in several modes. 

Firstly, it operates to process commands issued by the^.SMS, such as product 
refreshment (for instance, if the bill is already stored by the SMS, no bill is generated 
20 by the OCS), upd^e pf the ^vvallet m . the . smartcarf . 3020, . and ^session 
cancellation/update. . - ; 

^ Xhc/varipus steps^ij> the pr^^ 
.1. Identifying.,the rejpyant ^ubscri^^^ 
2. If valid, generate adequate commands tp ^the. Message Generator, in order to 
25 send an appropriate EMM. Commiapds may be: .... 
. rProduct^;Commands, 

Update of the wallet,. ..... 
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Session erasure. 



N6te* that' thfese operations do not imply CTeation or W since "Billing 

is klfcia^dy kiiown from the SNtS. These operations are ^free products" 

purchase. 



5 ' -iSccondiy, the OCS deals with commands received from tlie subscribers through the 
' 'Communications Servers 3022. THese may be received either via a modem coimected 
to the receiver/decoder 20i0, or by voice activation via fiSe telephone* 4^^^^ or by key 
' adivatioh via a MINTTEL, PRESTEL or liTcc system where available/ 

' ' Thirdly, the OCS deals ' with callback ircquesiK is^iicd^'fay Xhi siis. ' Iliese last two 
10 modes of operation are now discussed m more detail. 

In the second type of mode described above it was stated that the OCS deals with 
bbmma^^^ directly from the ehd^ li&r'^ (suB^sot the 

' CommUhicatibns 3022. iliese ihcluide^^ 

^ " pp\? evcht)Va subscription modification fcqu'estcHb/tKe siibscribei:/ irad a reset of a " 
15 pairental cckle (a parental code being a doi&e by w^iich parents may rcstrici^tibe^right o^ 

access to certain programmes or classes of programmes). 

.v';/:':t*T: .* . 'i*. \ . -'v ■/} . ... -..c^ i. ■ . 

The way in which these commands arc dealt with is now described in more detail with 
reference to Figure 11, 

^Product orders by a subscriber involve the followiiig steps:- 
20 1. Identifying through the AS the caller who is making a call tfifdugh the CS 
3022 ordering a particular product; 
2. Checking the caller's request validity, a^Sn^iisin^ the^AS'(whefe thfc' order is 
placed iisihg the receivet/decoidtt the 
^' smartcard 3020 -Retails); " ^ " ^ ' * ^ ^ 

25 3. Ascertain the price of ^e purchaSe;^ ' " '"^ ' * * 

4. Check that the price docs not exceed tiig c^efs cSrSB^ etc; 

5. Receiving a partial bill from the AS;' 
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...6.., .FUling .additianal fieldjsjn thc bill to form a complied bill; . ^ t ,^ 

7. Adding the completed bill to a billing infomiation storage file 3212 for later 

. ^ . ,procQSsing; and, ; 5. ...... 

-8,. Senciing couesponding. (X)mman^^^^ the gPV Message Generator 3210 to 

5 ; • . > generate ^thcjc^eyaji^ EM . ^ . / , , . • . 

The EMM(s) is sent either -onvthe modern line 4002 if the consumer .placed the 
product order using the receiver/decoder 2020 (more details of this are described 
later), . or else it is broadcast. ^ The one: exception to, this is where there is some:^failure 
of the ixipdem. connection (in the case .where the. consumer.places^the order using the 
10 , receiygr/decpder); in this event the EMMJs broadcast oyer Jhe air. . . 

. A subscription modific;atiQix refl\icsted by a. subscriber involves: 

1. Identifying the caller (using the /iS); 

2. Sending information to the Command Interface; the CI in turn forwards this 
inform^ationJo the SMS;^<and 

15 3. Via the CI, the OCS then receives an answer from the SMS (in terms of the 
' r . <»st pt th^^^^ _ . r 

H. modificatiqxi,w2U5,£^^^ the. receiver/decoder,, the OCS^ generates a 
confirmation to thQ.SMS- > ^l*il^rwise, for example in the case of phone or Miidtel, the 
subscriber is prompted for confirmation and this answer sent to the SMS via the OCS 

f .Reset of a parent^. cojdc^ , ^ . . 

I. . Identifying the c^ljg- (using, AS^; and , , .... . . 

2. Sending a command to the MG to generate an appropriate EMM bearing an 

appropriate reset.passwMd. V. - r jj . - t /.. 

25 In the case ot reset, of jparexital;^ the command, to., reset the cqde is for: security 
reasons not permitted to originate from the receiver/decoder. Only the SMS, 
v i f . . tclephpnp.ap^ .Mn^ or like .can originate such .a conmiand. , H?inc^ in this 
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particular case th6 EMM(s) are broafdcast ohly^n' afr/ fiever 'd^^ 

It will be understood from the above examples of different iiio<Ses 8f operation of the 
- ' 6CS that the user can have' direct access to' ftiie' S^ASl^^'d i^ 'particiili^r lhe OCS and 

AS, in that the Communications Servers krc'direaty-c6'to^ and iii 

5 particular the OCS. This important feature is concerned with reducing the time for 
' ' the user to communicate his cdmmahd tt) t^^^ ' . i- . ? . . .i ? 

• ' "This feature is illustrated further With' refefencc'to Figuffe l2^^ can be 

* seemhat the'end'asbr's Sct-Top-Box, and ih^partiaiiax its-!rc'c^ivcr/dec6Ser 2^ has 
the capability of tonmiunicating directly with' tfi6'^ Communication^ Sfervefs 3022E - 
10 associated with the SAS 3002. Instead of the connection from the end user to the 
Communications Servers 3022 df the SAS'^^OO^^ b&n| th^^ 
connection is directly to the SAS 3002.^' * * " ' " ' ' • 

In fact, as directly mentioned two direct conxiecti6^s Ite i^rovicfed;'^'-^' 

The first dircd conficction is ti^/ a vdictriink^W^l^tfefc^^ appropriate 
15 telephone line (and/or by MINITEL or like connection where available) where the end 
^ lifers still have toinpufa series of voice cbmmMtfeiii: cbdd^u is saved 

'"^^Mp^cd^wiih the cSmtam^ . .-r. i: -' C 

The second direct connection is from the receiver/decoder 2020 an(f3ieiiiiru¥of diidt 
is achieved automatically by the end user inserting his own daughter smartcard 3020 
20 thus relieving the end user of the job of haviil^'fe'inpiirtHc'^ft^ in 
turn reduces the time taken and fte liKelihb^ of eWors Hrt input; 

A further important feature which arises out of the abi$V^-dS;Hs^i6n- is cohdeme^ with 
reducing the time taken for the resulting EMM to be transmitted to the end user in 
order to initiate viewing by the end user of thW selected 'pii^^^ - . 

25 In broad terms, and with reference to Figure 12, the feature ^is- again -achieved by 
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' providing :thc end Sispf s rccci*er/deeodQi?.2p20 with the capability of communicating 
... dircctly.with:the..CommunicatioBS Servers 3022 associated with ithe SAS i3002. 

As described earlier the integrated receiver/decoder 2020 is connected directly to the 
. .. . CommunieationscSei^^ers: 3022i by . the modemme^ 'b^ck channeb .4002 >s6 that 
5 commands front . the ;dec6dcr:2020 arc processed by the SAS 3002, messagesrgeneratcd 
■ ,(including EMMs) and^theni scntlback cKrcctiy to the deeodcii.2G20 thrbu^ the back 
^ ; chanEiel 4002., A protocol is uscd:ih:the communication between the GS 3022 and the 
ir9pcivcr/decodci^!2020 (as described later), so: Jhat the CS receive acknowledgement 
of receipt of the^ relevant EMM;? thefebyj adding certainty tOithe procedure. 

10 Thus,, for exardple, ,mi the case of a pre-rboOk mode the SAS 3002 receives messages 
. : from- the>endjusert via: the smartcard/ and decoder 2020 via its mddem and: via the 
ielephona line v4D02, requesting access to a specific event/product, and ; Tetums a 
- suitable EMM vianthe 'telephone line 4002 and modem .to the decoder ; 2020, the 
modem and decoder being preferably, located together, in a. Set-Top-Box (STB). This: 
15 is thus achieved without having to transmit the EMM in the MPEG-2 data stream 
;> 2002 via- the multiplexers aaid. scarambler 2004, the .uplink 2012, satellite 2014 and 
:datalinK 2016 *to enable the .:jend user:;tor view the eveiit/product. This can save 
' :> considcfably;onItime and bandwidth. Virtual certainty is provideid that as soon as the 
u;c subscriber has paid.for his piirchase the EMM will, arrive at the receiver/decoder 2020. 
b-ru f ::^^T >i •^:;rd^.^ -T^idrriu^: -TOr^nsr- :r . a\ ^' .j.n -.Z 

20r :j .In>A^ operation of the ^OGS 3207 described above, ^the OCS 

b-. deals: with fcallback: requests issued byithe.SAS. ^This is illustrated with.^reference to 
:2 Figure • 13..I rTypicah cal^l^ purpose of -ensuring, that the 

receiver/decoder 2020 calls back the SAS ivia the modenimedTback channel ,4002 with 
the information that the SAS requires of the receiver /decoder. 

25 J As iinstriicted by: ffie. GommMd: Interface .3102,:: the ^^'^^^^ Message 
Generator 3106 generates and sends to the rcceiver/decbder;:202 a callback: EMM. 
This EMM is ciphered by the Ciphering Unit 3008 for security reasons. The EMM 

: may contain the tinie/date at^which the receiver/decoder should wake up and perform 
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■j: xa callback on its own, without being explicitlj^ sorlicited; the^EMM Hiayi^aiiso ty|)lcally 
c&itain the pbone* numbers which the tenninaliwustiidialyJthe mumbeir of . further 
attempts after unsuccessful calls and the delay between two calls. 

(When receiving the EMM,:or at the specified tiifi£-date; the received/decoder connects 
5 t ii : oto) the .eommuhitatidhs Servers 8022. The OCS 320.7. first identifies the caller, using 
br -. the JVS '3202;. dhdr .verifies .dertain detaiils,H'su6h:as:smartcard ppeFat5r-::and^45abscriber 

::;detiirs: ^erOCS then asks the. OTiartcard3a2» to send various dp^^ 
\ ^•:u:(such' a9.thc relevant session nutrtbiers, when the sewioniWaSlwatchbd; hbw-riid^y :^ 

the subscriber is allows to viev^^ the "session again -^th^iway iiJ wliSdfe fflK-^siton was 
10 viewed, the number of remaining tokens, the number of prebooked sessions, etc). This 
..i ^information iis deciphered by the :PPV5 chaiij Message Ge^lC^atof 3210} ag^iniJusing the v 
; ii. Ciphering , Unit '3008. The OCS^-adds this information ^ to Ta caUbadctJinformatiofi^: 
>:r storafee^le: 321-4, for later^rocessing-^and passing^to the SMS 3004i: :The information^ 
:;n. OisJ Ciphered for security reasons. liThe whoLe;'.proGcdurc^^^,i&. repfekted until there isi 
15riT ntothing more to be lead from- the smartcard. ^ 2--'-^ V2 r j--: b;:.; fnt^boi-: 

brr i Otfe -particular .preferifed feature of theixallback cfacili^iis .that before reading the: 
i ci ismartcard (sa just aftcF the identification.of the c^lcr uiiii^the AS 3102^ described 
; i f ZB above) a check is majie byrthe SAS 3002 thatthcfxeceivof/decodcDis ihdeed a genuine 
(;1 x)iie>rather than^ pirated version 6r computer simulatia6;:cS\fcai?Hcte out 
20 in the following manner. The SAS generates a random number, which is received by 
230 ;:tHe,receiver/dccoder, ciphered,^andnhen returned tb theSAS-olheiiS^AS/dedphers thisf^ 
o: 3. numbctii If the decipher&ig*^4S successful and the^ori^ai randoiriiliumi^ is'rctricved, 
-if is:.concludd:d that rthe; receiver/redder ;isc genuiiie;oarid. the/iprocedure coikinues. 
r u " l\0therwise, the procedure is discontinued, 5 :(: r C ^O:: iw.: - i^ ' 

25 Other functions which may occur during the callback are erasure of obsolete sessions 
: . 'on the sinartcard,.6r;!fiUingbf the.walletr^his l^ described later undef 

! 1 the section entitled^Smartcard!). t . ; 5::.r;.rio^ 60 : • y i v ' O 

' -i \ ..}-.. " J../' OT .'0^'* . ,<inj:' [O 5-.: v':! Liro^!';!'^ c\ M .if 

. Also as regards the;Pa>cPer':View. Chain;arca^3200, descriptioniis how made of the 
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. .-^ * Ctommunicatiras Servers 3022; r At the hardware, ley el, these.comprisc inthe preferred 
embodiment a DEC Four parallel processor machine. At the software architecture 
level, v/ith reference to Figure 14, in many respects the Communications Servers are 
conventional o One particuliafi. divergence frpmi conventional designs arises from the 

5 fact that the Servers must serve: both receiver/decoders 2020 and voice communication 
withxonventional telephones^4001i^as;well possibly as MINITEL or like systems, t. 

It will be noted in passing that two Order Centralized Servers 3207 are shown in 
•Figure- 14' (as "OCSl " ^arid "OGS2'!). Naturally lany desired number may be provided. 

The Communication Servers; include two main servers ("CSl", and "CS2"> as. well as 
10 * a number of frontal :servers::(f^Froritabl"ra)ci.d "Frontal 2"); whilst two frontal servers 
' are shown in the figure, typically 10; or 12 may jbe pjpvided per main server. Indeed, 
although two inain servers CSi and GS2 and two frpntal seiyers^ Frontal 1 andProntal 
• 2, have been shown,^:anyA number could be u?ed. /Sonie-redundancy is -usually 
^-''^-desiraibleCJ'-; • ^ 'v . • . <r 

• iv^n-^^ ^j- - \: . . y -v.'.'' •• c^. 

15 CSI and CS2 are coupled to OCSl and OCS2 via high level TCP/IP links 3230, 
whilst CSI and CS2iare:coupled to Frontal 1 and Frontal 2; via further TCP/IP links 
-Knr 3232. ^^'-Ir ^ .o er 6, . c ^'te^ ^ ' j-' w': 

:^ ^--itellluitrated, €3Sirand'CiS2;c6mprise seryers for^VSENDR" (transmissipn)|f RECVR'* 
(reception), ^'VTX" (MINITEL^ PRESTEL , or the- vlike), ^ (vpiee 
20 communication), and "TRM" (communication with the receiver/decoder). These are 
' coupled tia the' "BUSv for comm 

: . .CSli: and CS2 comlhunicate directly, with -the Teceiver/decoders 2020- via their 
- modenmied*)acfc^Gh2mnels 4002 using the X25 public ne^ The 
relatively Uow-lfevetjpT6t?>colf between the Copimunications Servers 3022 and jhe 
-25— ^ receiver/decoder^ 3020 i&in.X)he, pretexted ^embodimcfnt ba$ed upon the.y42 standard 
intematibn^ CCSPFTiprDtocol^^ reliability .by: having error detection and 

data re-transmission facilities, and uses a checksum routine to check the integrity of 
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- - - 'the rc-transmission. - An escape mcdijanism* is-ialso. provided^^ the 

tonstnissiofa of disallowed characters. - ' i^'ri-.. ^ : . V I.;*. I r k ti. 

' CJn the other hand, voice telephone^ corh^municatioa is :Dar^ oiit' viaiAhc cErontal 
* ■• - Gomihurii^^^ Servers, each capable -of picking a^^^ voice 
5 ''' cbnncctiohs from the connection' 3234 tO the>16cal telephonei network via the high ^ ^ 
speed (El) standard telephony ISDN lines. 

* Three particular functions of the software pbitidn o£. the; Communications Servers 

(which could of course alternatively be implemented fixlly in hardware) are firstly to 
: c^jjy^rt the relatively low level protocolf/' iixformMiOB : -received . from the 
1& receiver/decoder into the relatively^feigfi leyekprbtocoLinformatioii output to th^ OCS,r 

secondly to attenuate or contrbl ffie-tfumbef 6f simultmegous«X)n^ made, 
'/^ ^ ^arid thirdly to providie several simultafidbus channels withoutMiy: mixing. - to this last v 
7i<c: ^regard, the Gommiinications= Servers play theiroler of a; form- of multiplexer, with the i 

interactions in a particular channel being defined by a given Session :IE>^ (identifier), 
15 which is in fact used throughout the communication chain. Ir 

^'^^^ • • •? • :. / / KMrjo^ ^t: i":::- ^.v: ' \^ . 

- ur; -iphiafly^ regards the Pay Per View Chain area 3200; -.and \titfc iiE5ferqnpe agam to . 

Figure 5, the Server for Prograrame Broadcast (SPB) 3208 is coupled to f>m pr more 
Programme Broadcasters 3250 (which would typically be located remotely from the 
^ — ^ iSAS) to receive programme informatioiiL Trr^i SPB. use 
-20' ^ mfonriation corresponding to PPVev^ :crv " } 

A particularly important feature i is that theifiltered pro^amme event information is 
passed by the SPB to the MG which in turn sends a directive (control command) to 
the ME to change the fate of cyclic emission of therEMMs in jiven circumstances; 
' this is done by the ME firidiilg aU^'<EMMs with: thfecrelevMit session identifier and 

^2i5 • - changing the cycle fate allociated to sudi miMscoThis rfeature^might [fee .thought of as 
^ dynamic allocation of *bandwidthp for specific EMMSl i Cyclic EMM emission is 

r^u : discussed m more detail in the section below/conccmcd iWiftlth^fEMM Jnjcctor. 
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; The jcircumstanccs.in»which;thc cyelc rate is changed arc now dcscribcdiwith reference 
' ; tQ Figure 15, whichydcmonstrates liow cycle rate 3252:is, raised. a. short:while (say 10 
minutes) before a particular PPV programme event until the end of the event from a 
slow cycle rate of say once every 30 minutes to a fast cycle rate of say once every 30 
5 seconds to 1 minute in dfdet4o meet the anticipated extra user demand for PPV events 
at those times. In this way bandwidth can be allocated dynamically according to the 
anticipated user demandii i This can - assist in ; reducing the overall bandwidth 
requirement. .)L^r 

The cycle rate of other EMMs may also be varied. For example the cycle rate of 
l(y ' subscription EMMs may bcVaried by the Multiplexer and Scrambler 2004 sending the 

• appropriate bitrate dircctivei^i.-': - i. :*:- ■ i.; / 

• EMM Injector : £1 N ^.[. r::^; \ ^. ; ■. 

ciA eoriceming thei'EMM Injector -3300, details of the Message Emitters 3302:10.3308, 
c'^: v ^Dimihgtijpart vof : t^^ EMM Injector and. acting as output means > for the Message 
15 Generatoty • are no^idescribed'^^ reference to Figure 16; .Their function is take the/ 
; EMMs-arid to pass them c^ the^mahner of a carousel) Ivia respective links 

3314 and 3316 to. the Software Multiplexers 3310 and 3312 and thence :to the 
hardware multiplexers and scramblers 2004. In return the software multiplexers and 
^( : scramblers 2X)04 generate a global bitrate directive to icontrol the .overall cycling rate 
20' ^^-iDifn the^EMMSy'tO d6 ^> the M&si take into account various parameters such as the 
Hcyde tim^i thfe $|£^>iof! ]^ the figiiire, EMM_X and EMM are! 

group EMMs for operators X and Y, whilst EMM^Z arel other EMMs -for either 
operator X or operator Y. 

r > . FurtheT>dcscriptit)ri pfOccetis^ fbf^^ exemplary one of the Message Emitters; it! will be 
25 ^apprmated th^t^thd' remaining MEs ioperate iniisimilar fashion, ^e ME operates 

• iinder cdntrol of directives &66i-the iMG^ most notably transmission start and stop time 
- i and ctnissioiiirate; as 5wcll ^ segsSOn ^lUfnber if the EMM is a PPV EMM.: In relation 

' - • to the emission ratcf/ inUhc^prefOT^ one 
of five values -frbrii Vefy'^faSt to- ^teiy^ slow, ^flhc nuixieric valued are xiot<specified in 
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• the .directive- but rather the ME maps the diroctive to: ari .actual numeric value which 
is supplied by the -relevant part of the SAS-^.I0Ttha p^efe^red^embodimerit^ the 5 
. . emission rates are as follows:- a : : V^M laiuc . uq : ^.^oi : / :i : 

:* ' f^'- ' '1. Very fast - every 3Qrsejceji5s : :/ >n^... ; < ^ :: 

• ; Fast - every i minute . - h** ..i r'.. i: r 

^ -s '' • 3r ^ .Medium - every 15 fiiinufes . . • ' o.^.v. r:?. 

4. Slow - every 30 minutes v.:;:.:^.: r 

5. Very slow - every 30 minutes 

lo v .r. '? * ' v^./ J ' i> . iiu :o h^:: : c 

: Tbe^ME has first and second databascSs5320 and 3322: The flrst^database is for those; 
10 EMMs which have not yet achieved their broadcast:datc^iffiiese- are stored in:a series 
of chronological files in the database. The second database is for EMMs forr 
immediate broadcast. In the event of a system crash, the ME is:aiTangedit6 have thfel 
. : ^ ability to re-read the relevant stored file and perfotm^.cdrrect tecadca^ All the files^ 
. : . stored in the databases are up^tcd upon request from !th$ MiG,lwhen ihg MG wishes 
ISni . ito maintain consistency between- incoming diteetiv^ iandLJH^tfMsialreftdy S^ut^^^ thfe^ 

i ME.. The EMMs actually being broadcast are alsQ stored-io? R^^QmlAec^sscNfemory 
::.rj 'V3324. ... ' ; I ' . ' . "A, -.z<^:\o: \)x^\ l. . ■-. 

';.t.7 - A combination lof the HFOs 3162 and .3164(Jf iheiM^JS^ge/^ejierator-a^d the 
databases 3320 aiKi' 3322 in;tiie Message Em3Ber:meana tetdtfepatwoiggan ©pJ^ate ire 
20.: Y^tirfiflaone mode if She lirfc 3156 between. tli^mjfo:teifiporM^ can 
? still brdadcast EMMs. ^ X j:\o^ r^sq:; -.6\ 

The Software Multiplexers (SMUX) 3310 and 3312 provide an interface between the 
: ; :r ,MEs and ^he hardw^xe^m^ In: the^prpfex^ed f^B^fidimenti they each 

; . ■ ' -reobive EMMs from ;two :of the :MEs/ elthoygb hi :g^n<?r^vthp^e j^. nor:restriction on the 
25:.; - number of MEs^hat can be connected with pooSMliX. :,Tb« .SMUXs. concentrate the 
EMMs. and then pasis them accOTding^^ Jbic. appropriate hardware 

A multiplexer. This^s.hecessary -because jth^-b#i*^^^ thje different 

: ' types of EMMs and.plaoe them atr>di£folPftt :plaeEs .-in^^,t^^ stream. The 
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SMUX^s also/forwsa'd.globarbitratc'dircctiy.es from the hardware, multiplexers *fb the 

^r-n 0-^ • ■ > . : . ' ' ' - i . ' :>*•" • 

One particularly important feature of the MEus that it emits EMMs in random order. 
> The re^ason ^fpr this is ;as follows.- The Message Emitter ^has. no ability to sense or 
5 r:,:: 'control what.it^eniits tO; the multiplexer. Hence it. is possible thai it may transmit two'^: 
: , ^EMMs ^yhich . ?u'e: to.be rec^^ by the rjeccivcr/decpdcr 202Q back to 

back. In such circumstances, further, it is possible that if the EMMs: are insufficiently 
separated the receiver/decoder and smartcard will be unable to sense and decode 
.priopcjly ithc sc(iond^of:;ai^<5::EM^fc::i^ cniitting-the-EMMs.in.i^ndom^order 
10- can solve .tlus:pr0blem./ . . :; . l-: .. * * ;7 . J u 

-.J i-^-i • ' i:. •u'f;:^. :Cr : * :j :^ M'.- ri-. "-^f. ■)ii;v ; ') 

/ ii/ The manner in which randomization is achieved is now described with reference to 
• Figure: 17;> in the preferred embodiment the nccessaiy software logic is implemented 
; in the ADA computer language. 'A particularly important part of the randomization 
v: iis :the cortej:t .stQrage of the :EMMs in the databases 3320 and 3322 (which ,arei used 
15^ for backup pwrposcs) and inith&EAM 3324. For a3partiiailar:cycjie irate and operator,- 
thejEMMslare.$tored!in.a two-dimensional >aitay, by^rank 3330 (going say from A to 
. : Z) and nurnbfr in the laiik .3332 feoing from 0 to N); : A third-dimension is added by 
: cycle rate; .33:34, :.s.Oj that-:th6rjB are: as many two-dimensional arrays as rtherie ariB: cycle 
^ : rates, ^ In:the/p^efertcd , embodiment thererare 2 ranks = and typically ^iOO or 300 
20 EMMs in each rank; there are 5 cycle rates. A final dimrasion to the jarrayi is added: 
by the presence of different operators; there are as many three-dimensional arrays as 
vcn there are operators, dStorage^bf' this fashion can permit rapid retrieval in 

the:event ^that;the>MG wants la ddiete arparticul^^^ h i^' 

Storage of the EMMs takes place according to the "hash" algorithm (otherwise known 
25 as the r ^'onc-^way ihasfr fiinction'*! iThis opfetates on a modulo approach, , so that 
successive ranks arcifilled before: achig^^ nmnber in the raidc is used, and.the: number' 
of EMMs iii each rank remains roughly' constant. Tlie example is considered of there 
being 256 ranks. When the MG sends the ME an EMM with identifer (ID) 1, the 
- rank l*lMs assSgried-to thiisBMMv and it^ the first number 3332 in the rank 3330. 
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. Thc.EMM:with ID 2=is assigneid the rank "2^/^»so on,^up-'reH^^ 
EMM with ID 2S7 is assigned the rank again (based on the modulo functi(»i)^ and 
takes the second number in the first rank, and so on. 

Retrieve of a specific :EMM, for example wheii- deletion of ' a Specific EMM is 
5 ' • rcqirested by the^ MG, is effected by means of itfee inverse Of ' the above. ^ Thd hash 
^ algorithxn is applied tO'the EMM ID-*to obtain the^rank,- after whitih'the numlDer ifa the 

^?*:iank -is f6un± --^ - - = : *' ' 7:- r:! 

vt^^ T^ actual randomization occurs when the^ EW^' are^, oii -a 

from RAM 3324 using the randomization means 3340 which' is impleniented^ the 
10 hardware and/or software of the Message Emitter. The retrieval is random, and again 
-based omth^ hash algorithm i Firstly^^d'^randomtnuraber (in tte above cxa^ 
L . : in Ihe xange 1 to 266) iscchosen^oto yield thc:particular ranlcx>f interest. Secondly, a 
further. random number is chosen: -to yield the paDrticuiar xnlmtoer in flfie rarik: : The'^ 
t:^ further randdih number is-sclected according to^ffieitotM number) of JEMMs iri-a^given 
15 ' rank; Once^a^igiven EMM has been, selected-and broadcast, it ISinwjved^to a^sccond 
:i / identical: storage arcf imthe llAM 3324^ again, using thcihash ifemm^ the 
< : :Srst ^ea* diminish^ In^size^- as the BMMs dr^ bfoadciasr^ to : the ifi»dt€&r th&t^ once a 

; <:omplete:rank has bcen used, this is deleted. Once &d fir^t iftorage'latea'iS'^hiplet^ 
U em^i^, it is replaced^liy the second storage ^iaieat ibfef ore i'st^^ew**^ df ^^EMM 
20- vl^') br6adcast;>and vice veisai" ' ' ". 'i . • r.^^i \ .-/v c an -.-urlt :A::^ izEt) t:: f.MM3 Gi; 

cii .hrthe iabov^ fashion; after two or three. cycles: of the^EMMs,«tatisti9ally> the chances 
of any two EMMs destinodlforithe sapie end; user <being Saftsmitted back to>back is 
negligible. 

; - At :regular intervals whilst the W^BAs arc being stored tiie: computer .3050 * computes 
25: f:T the. number of bytes in storage ahdvfrom Ihisicampiites. the hit^ ofTcmission given 
: :v.^ thcglobal bitrate directive fromcthe multiplex^ and software rxncdtiplexeri 
' ; c DM *>r; c.^if/'; t.: t^v:. 

- Reference was made above to the backup databaiSes^3320 and. 3322.: These are in fact 
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in the preferred embodiment! sequential file stories, which hold a backup version of 
what is in the RAM 3324. In the event of failure of the Message Emitter and 
subsequent lestjarti or more goB^rally when the ME is being restarted for. whatever 
; . reason, a.iink isimade ^bpt^een: the the databdises,: over: which the: stored 

5 ; \, :EMMs are uploaded to^ RAM.-, In this >yay, the risk of losing EMMsin the event of 
; failure can, he, jemovcd. ; , : vm - k ' c 

Shnilar stoijag&cof ^Pjpv:= /EMMs loccurs to that described above in relation to 
subscription EMMs, with the rank typically corresponding to a given operator and the 
^ number m. the raii]^ cprresponding to the • 

lOv ' Smartcard , ; r;r }--^; - .» • ■ • ; " 0 •■ 

A daughter, or "subscriber", smartqard 3020 is schematically shown in Figure 18 and 
comprises an 8 bit microprocessor 110, such as a Motorola 6805 microprocessor, 
: = havjng M-inpu^oy^^ a standard arraycbf contacts 120 which in use 

o t connpctpd.tp: a jcprresponding array of contacts in the card; reader of the 
15 : rcceiyer/dccodcr 2.020,:- .thfe .card C reader) >>being . of- conventional :designr. The 
microprocessor,3.10 i§ adso pr^^^ with busrconnections to preferably masked:ROM i 
13Q, RAM 140 and.:^PROM.:i5Q. /The smartcard complieis with ;thc ISOi 7816-1, 
7816-2 and 7816-3 standard protocols which determine certain physical parameters 
; :. rPf thp snasattspupds the^positions of thelcontacts on the chip and certain .communications 
2Q .betweeji,.th©ri^xtem&I.*system!(m^ particularlyf the receiver/decoder. 2020) and the 
/3*::o^?5»aitPar^Hrespejp^y One 
function of thcrnaiofoprocjessot ilO is to manage the^ memory in the smartcard, is now.': 
described.'— vj,k.'^: if;'Hi:>ac:* moii iC''^* ■>i.:: h . . ' • ^ „ .r. 

The EEPROM 150 contains certain dynamically-created operator zones 154, 155, 156 
25 an(^ dynamically-cre^e^^d^tta zctoes whic will now be described with reference to 

•^;Eigure.-19^ v ■;n v--, is ^ o.^u, . • - . , , 

, Referring :„;tOi:Figure:ol'9k^^^^ "card DD" (or 

: - manufactiurcr) zon^l^l of :8 bytes.which contains a permanent subscriber smartcard 



BNSDCXI0:<WO ge43426A1 I > 



■1 



wo 98/43426 « 



PCT/EP97/02108 



- 37 - 

^ identifier: set by the manufacturer of the smarteaid'3020v ^ - '^i 

. -When^ the s smartcard is r^set, the rKiCr^jpTO^essor'' 110'^ iSSiies a: sigridl to 
'\L receiver/decoder i 2020, '^tJie signal comprifeiilg^ai? idcritifi«v 0f-t^ abcess 
; usystera iKcd -by4he snlartcard and dalSr gen^YStcd fifoid^ data Stored in ^he smartcard; 
5 including the card ID. This signal is stored by the re<2civfer/dee6der 202C(, which 
subsequently utilises the stored signal to check whether the smartcard is compatible 
: ! I with the conditional access system^ used by the f edelvet/d4c6de^> 2020;' ^ - 

The EEPROM 150 also contains a^enixanelit J'jMdojiflliimbep^gfeiieiM^ 152 
which contains a program for generating pseudo-random numbers. Such random 
10 numbers are used for diversifying transaction output signals gc&erafed'by thd- 
? ni; smartpard 3020 and sent back to the litoadcastffifr / c t: A 

J "Below the random nurn*>er generator ^one 152U peJiBitodfifi'toadagem'enfe^^^ 153: 
:^di ' of 3344bytes is provided.* The pcrfnanent m^agete$at^One>lS^ is a^Specific operator 
5ii zone-, utilised by a program in the^ROM^130 in die d5«iamic ca-ea^oii {and remov^^ of^ 
^ 15/t j;Izoiie& 154, 155, 156;.. as described bdbw. .IHa^operB&atifent' niaafiagement zbne 153 
, I- i i Icbntaiiis ^lata: relating to vthd rights of tbe sniartcaFa Ifca'ca^a ^emdve zoned. - 

icociThe ppogram foujdynamically creating and rfeniovingaones^fe ris^lteii^^d' specific 
J bzoiie: creation^X^r remov^) EMMs wMch -are *traj^fflittedTbyv;fc^^ and- 
^aO received by the receiver/decoder 202O:and passed tobtte ?iabSi^ 
20 r - In order to create the.EMMs: ttLe*opeTiatcsr requires -^^ei^^ the 
management zone. This prevents one operator from deleting zones relatinji fo another 
operator. 

. ^rBelow the management^one 153 is a series-of->*k)p^tdf ID^^zOhcg 154, 155-, 156 for 

operators 1, 2 N respectively. Normally at least one operator It> ziiMie will be 

25 preloaded into the EEPROM of the subsoiber smartcard 3020 so that the end user can 
; cflecrypt prc^rammes? broadcast by -that 6p6Atb£'l llbwfevcr-fiflp^ier ^ operat<:>r 10' ^zones 
jcan subsequently.be dynamically. crea1^:using?tiie mi^a^ai^ zone 153^-in response 
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/'to a transacticm:butput.isign^l -^generated via his smartcard 3020 by the -end user 
b (subscriber), as.wilisubsequehtly^bedesOTbed. - --^ - • 

Each operator zone 154, 155, 156 contains' the identifier of the group to which the 
' / r : smartcatd 3020 belongs,nand the position of the smartcard withiii the group. This data 
5 i enables the smartcard -(along with tHe other smartcards in its group) to be responsive 
to a broadcast "group" subscnptioii EMM having that group's ^address ' (but not the 
' smartcard's position in the group) as well as to an "individual" (or commercial- offers 
subscription) EMM addressed onfy .to that, smartcard within the jgroup. There can be 
256 member smartcards of each such group and this feature therefore reduces 
10 '. significantly the band^dth' required^f^^^^ ' 

In order to reduce further the bandwidth required for broadcasting "group" Subscription 
EMMs, the group data in each operator zone 154, 155, 156 and all similar zones in 

: ^ :the EEI^OM of ^Sniaitcatd 3D20 and the other daughter smartcards is continually 
updated to enable a particular smartcard to change its position in each group to fill 
15 any holes created by e.g. deletion of a member of the group. The holes are filled by 

..■y the^ SAS 3002-^as :in tbe^SXM-server 3104 there is a list lof such holes. ^ • ' 

• In tMs m2amibr:'fr2[gm 
'.c i : at or near thei maximima'Of 256 raembers. - - :^ ' - ' --^ 

t . ? •. 

Each operator zone 154, 155, 156 is associated with one or more "operator data 
2Qr; ^objects" stored^in-the EEPROM 150. 'As shO>vnH Figure 19, a series of dynamically 
r ; created 7operat6r data"i>obje^^^ below the operator ID- zoncs> 

5 ' Each of these d3ject3: is labelled With: v . .i-^ c . - ^ 

a) an -^identifier" 1, -2/ 3 1 N correspobding^ to its associated operator -li 2, 3 ... 
- as' shown in its left' hmdl seetibh ii H 

25 6) * an "ID'V ihdibating-fiie^ type '6f object; and. ' - ^ 

' y^' c) - a *-data."' 2»ric 'f^Sctved Sd^^ diata,' -afr ^own in the right hand section of catYk 
relcv^ ^opef^tor objecrddtFigure be understood that each operator is 

associated with a similar set of data objects so that the following description of the 
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-ir\j IMP^ of data in the data objects of operatot: 1 is als!^ applicable^td th&data objects of 
all the other operators. Also it will be notedi^at the . data^ objects are . located in 
contiguous physical regions of the EEPROM and that their order is immaterial. 

; Deletion of a data object createjs a , "hole" ,166: jibthe. ,smartcaj:d, that is^ themumber of 
5 , bytes that the deleted objects had .previously occupied are not immediately occupied., 
5,;. T Th^e thus "freed" number oX bytes, or "holQ- are labelled with: ? - /. - . r ; % 
^f; ^a) . , an "identifier" 0; and v ..y. - lI vo- * el - - r.x.. % 

Jb) - an "ID." indicating that the bytes are free to receive an. object: :-; ■.*:. 
ij.rv' ii; -■ .. : " " - . ' . . ' ^ '..^^ i '^-^ :5-' '.^i'ar t^^r.r^t... - 'fl 

The next data object oreated fills the hiole; as idontiOe^d by ithe identifier 0., In this ' 
10 manner the limited memory capacity (4 kilobytes) of the EEPROM 150 is efficiently 
^;, f:r: utilised. -^--v . -p" i:/*-^ . -^di : ^r-r, J. j ^ c: M 

: Turning now to the spt of data objects associated with each ^)peratoryexampks:of 
i f . data .objects are now described, . v It/civ-^^^r: / .- v. ) 1 . t j 

v' if . ' 7^ ■ ' :c Oi:5:uI; -vie v":. if". 

Data object 157 contains ;an EMM key used for dejagtpSing encrypffed EMM's received 
15 by the receiver/decoder 2020. This EMM key is permanently stored in the data object 
; ;r ;157v TWs data object 157 V^^V be p:eat€4:priQr tO;4fetri1?JAti©B.^^^^ 3020, 
and/or may be created dynamically when creatia^.a^newi.i>pjccator?zone .(as described 
above). , 

V :!£:?:rI?ata:object 159 contains^ ECMrkeys which aire seAt1?y:the.assQdatediOperatpr (in thisl 
20 - ^ case operator 1) to enable the end u^er to de»ypt ihe:.pafticMiar;5bQuquet" ^ programs 
to which he has subscribed. New ECMr:keys:,are sentrJtypicaUy cvely monthi along 
with a group subscription (renewal) EMM which «S.ews tbf^CTd user's overall right 
to view the broadcast from (in this cas^X opsRitor; 1.. ; The use of separate EMM and 
ECM keys enables viewing rights: to^be pur9^»^d..in,4iffer^^ i^ays (in this 
25, . enibodiment, by subscription and ^ilividyalliy (payc£or <Mew)).iiandjalso increases 
- ; security. The Pay Per View (PPV): mode rwai.b^ 
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? .' Since new ECM keys- are sent periodically;- it is essential to prevent a tiscr from usin 
> old'ECM keys^ for^example by-switdifaig off the receiver/decoder or re-sctting a clock 
to prevent expiry of an old ECM key so that a fimcr in the receiver/decoder 2020 
could be overridden. Accordingly operatot zone 154 comprises an area (typically 
5{ having a size of '2 -bytes)!: containing an obsolescence^ date of the EGM keys. The 
^martcajrd 3020 is arranged toi coinpare this date with the current date which is 
j . cdhtained in jeceived E(^s>and to prevent decryption if the current date is^ldter than 
?r : ^ the: obsolescence' date; The obsolesbence date is transmitted via EMMs, as described 
'.-.abover ^ ^-.f 1^:'^ "•'^ • . » -v.. j 

10 ' Data object <161 contains a 64 bit subscription bitmap which i^ an 4&xact' representation 
* i^: of the broadcast operatbf s p^o^rkms lo which the subscriber has subscnbed: Every bit 
represents a program aridlsi set-to "1" if it'is subscribbd to and ?0" if it is not. 

. 5 . Data object 163 contains a quantity of tokens which can be iisfed by the consumer in 
/ : A ppV modeUo'biiy ^ viewing rrights to an imminent broadcast e,g. in response to a free 
15 preview or other advertisement.- Data object 163 also contains a limit value; which 
may be set to e.g. a negative value to allow credit to the constuner. Tokens can be 
purchased -e.g. by credit and via ^the: niodenmied back channel 4002, or by using a 
^ voicc^se^ve^M cott^blnalioh-with:a credit for example. A particular event can 
- ^ ■ be dfiargcd as one token^b^^ . ^ . ; ' ■ 

2ai*^ - 'Da[ta::obj&t -1:6?^ PPV'evdnt; as showiirWith reference to 

to::.n;tablenlti7 btJE%ure : ; . : %> 

The PPV event description 167 contains a "session ID" 168 identifying the viewing 
session (cbn-esppiiding to> the prbgra^^ thie time aiid date of broadcasting) a 
"session mode-* 169 indicating iiow the viewing right is being purchased (ppgv in pre- 
25 book mode), a "session index" 170 and a "session view"cl71v ? ^ 

<^ :ln respect of^'r^ceiving fa.progranm inode, the itceiver decoder 2020 

determines whether the>pr6gramfeife i^^ ija PPV mode; If ^so, the decoder 2020 
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chccks> u^ng'the items stored in the PPV cyco^ description 167' whctiiexithc session 
.IP for, thoprpgjgroni^ is stoxed therein. M thJ^^s4ssion |Diis,store4 thereiri/the .control 
>yjDrd is pxtr^^ Joon} the ECM. • v m:;;* bU- ' . /'^'^^^ h^^^v^ c. 

n Xf • the /S^^ion ID is. riot stored therein, byhnreans i^of a specific:^ application tKe 
i5 r;;;, jeiceiyer/decQder 2D20 displays a message io^the end iuscn indicating lhat he has the. 
i i > vv.tight tOrView the session afcifi cost o% say, >25 ttricehs; as read'^from the E€^ or to 
i r>n'f \ .i^jinect to.the cdmrnunipations^^ervers 3O22.10jpOTcbase the fcvent. Using the tokens, 
if the end user answers "yes" (by means of remote controller 2026 (see Figurc^2)) the 
decoder 2020 sends the £CM to the smartcard, the>smartcard decreases the wallet of 
JsQ r .t : the sma^card 3020Jby 25 tpkcms, writq$ ,the session ID 168^. the session liiode 169, th/ft 
J ri • 7 ';S@sjoo index 17Q and the:, session jView 171 iitthf ^^'^ni desci^ion U67 and 
iextracts and;deciphers the-iCQntrol word from.jth^.SCM.^ . - : ^ ; . ^ : - ^ : ^ 

ai 7 : to tJxp "pre-^Ook^' mode, an EMM will be passed^ to ^beEi.smartj3axdJiQ20 so Cthat 

snntjartcard mil write the sessfion ID 168, Jhe ^ess^n mode 16 170 
15ui' / and-the session view 171 in the PPV eventldescription 167£:using the EMM:q iti 

. :jr.r session index- 170 can i)e setio differ^ti^te x»iie broadcast front the. other. This 
'r:; featuto permits^ authorization to.be:> given forciai*subset:o&l:m>adcasts^ £or:^exampIe, 3 

times out of 5 broadcasts. As sodn:ais aa EGVf i^&l^ session indicx diffenagit from 

the current session index 170 stored in the PPV event description 167 is passed to the 
.20'i'ii -.rSiawtcard, thefiaymbe^]o£ the ses$ioif yiey^^ljI^l-ISM i5&ife-T,.Wb6nEtb<asessipn 

view reaches zero, the smartcard will refuse to decipher mi;2:ECM With aiiiffcrent 

session index to the current session index. 

{. ' -Thfejmitial value of the sessicaijview dqf^endscpnly on tbi&l!^^;iii which thcbroadcast 
- -r. ; sypplierr:.wisheS' to. define^ thf?i event to whicb -itcfcl^e^/ ihe,.;^ view for a 

25 respective event ruii&y take any value. : . ^i: . - ^'*t , . 

: .The . microprocessor 110->in th^'Smiirt^^r^ij^p^ncm^^r^ ^md a^icromparison 

: ? program to detect when/the 1jimit>ti3„ the •ftuipj^e]: ^q^^ ^^o^ying^ of -a particular program 
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All of the session ID,1<S8» the j^siojn mode 169y the sessioajindex 170 and the session 
view 171 in the PPV event description 167 may be extracted from the smartcaid using 
. the "call-ljack" procec^^^ 

5 r Each receivcr/decpder 2020 contains, an identifier which may either identify uniquely 
that receiver/decodcr or identify its m^uaufacturer or may classify it in some? ioth^r way 
in order to enable it to work only with a particular individual smartcard, a particular 
Pf class Qf smartpards-made.by the^ same or a corresponding manufacturpr or any^pther 
class, of smiartca^rds^ ^itended for use with that class of i:eceiver/depoders 

10 ^.«. exclusively.' :^r.:i,;:^V': -A: d ^i-ir:. ---r ■ > .. ./ ^-• 

^ •:.'{:• \\j ^ ?OJi.'~r 2 » -^f V \ . 

r \ In this maimer thfi fece;iver/deqpd^72Q20 which have [been supplied by one broadcast 
: suppUer to the c^^ use of nocL-^authorised daughter 

^ smartcsttds 3020.r^^K ? > : ; ^„ > - 

Additionally or alternatively to this first "handshake" between |he smartcard amd the 
15 receiver, the EEPROM of the smartcard 3020 could contain a field or bitmap 
y J deSGribing the cjrtegories otfficeiver/d^<?pders 2020 witib:}vhich it can function-- These 
coul^, be. specigpd, either d the manufSi9nu;e ,Qf tixe^ smartcard a 
s^cific^PEJi^^ 77 ^ t, ■ • r . c^-r^n 

The bitmap s^pred^ in. the smartcard 3020 typically comprises a :Ust- of uprto 80 
20 ret^iyer/decpders, e^ch J4e^^^ cprresponding leeeivcr/dccodcr ID with which 

the smartcard may be used. Associated withjeach receiver/decoder is, a level "1" or 
"0" indicating whether the smartcard may be used with the receiver/decoder or not, 
^ respectively;. , program in; th^ jmemory 2024 of the recejivcr/decoder searches for the 
identifier of the rcceiyer/decodcr m^^ smartcard. r If the ; 

25 identifier is found, and the value associated with the identifier is "1**, then the 
. smaytcaId .Js -"e^abled•!J:d^^ will not function . with that 

'■reeeiver/d^cpdeiv:/ s'Scr-i .-r:-^ dii^il ^1. . ':L Cv : : ' *: • . . v.c 
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In addition, if, typically because of an agreement between opcratois^ it is desiired to 
authorize the use of other smartcards in a particular receiver/decoder, specific EMMs 
^^It'be sent to those 'Railcards to chsmge-^eir^bibna^ via the tfani^iider' 20i4. 

Each broadcast supplier may differentiate ^IKis" -subscribVris accbfdta^^ certain 
5 predetermined criteria. For example, a number of subscribers may be classed as 
( "VIPs"*' Accordingly^ each broadcast sapplier inay divide his su^^^ a 
pluratlity of subsets, each subset comprising my hu^ " - ' - ' 

j^^'t . . ..'.v* ■ ..... . i- ' 'i " -:' *■ • ■ 

Tlic- subset to which a particular subscriber belong iS'sef in' the'SNiS3064. In turn, 
- the SAS 3002 transmits an EMM to the subscriber wMchPWriies^^6rmati6^r (fypically 
10 of length 1 byte) concerning the subset to which the subscriber bciliongs- ihf the 
relevant operator data zone, say 154, of the EEPROM of the smartcard. In tum,i^as 
: :ceverits are broadcast by the broadcast suK>iferJ' M^teCM,^^^^ 256 bits,^is 

r ' transmitted w the event and indicating which dflKe subsfets Of su^^ inay View 

the event. If, according to the information stored in the operator zofie, the subscriber 
15 does not have the right to view the event, as determined by the ECM, programme 
' 'viewiiig^isiaenied.' '^^^ ■ --''^f^^ ^ •. ^> • 

^ < this facility may be used, for exanipte^ tlv ^ftSd-loff^^ of a^g^^ 

: sdiartckds -iki a particutar geogpipl^'eal regioh during the' tranSlaaiSjsion 6!% <p^arficular 
program, in particular a program relating to a sports fixture talkil^^MW -iir' that 
20 geographical region. In this manner football clubs and other sport bodies can sell 
OS obfdadbasting rights^^Ufside the^ v^MSt-l^e^enta&^liSiE^ stippdttei^^rom 

^' viewing^ the- fixture on- tt^fevisioB.-; Tsx this-ih^ifii6* th^^^ockf l^t^ -aie endouraged 

^> ^ to buy tickets ihd dllieiiid: thfe fixture/" ^bo^>A :u ^^ry b if>Tm rl 

• ' Each-6f the features ^ociated ^ith zories^lSl-t© 172 is^fiiSgidered.to be- a separate 
25 ' ■ mvention independaat of the dyaai^ - -^ - ^ 

V lie" / ' ' 'Vi. 'i: ii..-^ br.i,z^'^2f ^n^lc 5:;J tcL /orwol '] --^r-in^-^. \ 

?ti i , it. wilt be understood that the' pfe^eiDK inv6tirt:Son^4ias be&n above purely by 

way of example, and modifications of detail can be made within -the scope of the 
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invention. i^.^^ 

Each feature disclosed in the dcseription, and (where aippropriate) - the claims and 
drawings may be provicled indelpehdehtly bf in any appropriate- combination. 

^^In the aforeraeiltibncd jprefen^ed eriibodim certain features of the present invention^ 
5 have been implemented using computer software. However, it will of coiiirse be dear 
to the skilled man that any of these features may be implemented using hardware. 
- Ftirthenndrfe, it^ wilP^ readily imderstood that the-^unetibnS^perfonned by the 
hardWsrfe- ^thfc computer soffwstfb, and ^such like £ut performed- oh- or iisihg electri 
ahd^ikc 'Signals. -^..^-^V'^ ■ ^- " — . 

10 Cross reference is made to our co-pending applications, all bearing the same filing 
^"^^ date, affid entitled (Attorney Reference no. 

PC/ASB/19^07j, Smaricard^for lis^ with a Receiver of Encrypted Broadcast Signals, 
and Rec:eiver (Attorney Reference -N^^^ Broadcast and Reception 

System and Conditional Access System therefor (Attorney Reference No. 

15 ' PC7ASB/19710)>-Db>)vMoa^^ "a' Computer File' from a Tfarismitter via a 
Recei^r/D^bodct-^to^-a (Attorneys Reference No. - PC/ASB/19711>- ' 

Transmission and Reception of Television Programmes and Other Data (Attorney 
Reference No. PC/ASB/19712), Downloading Data (Attorney Reference No. 

- ^"<26ai|iut6r 3 (Attorney Referencd^^ No. 
20 PC/ASB/19714), Television or Radio Control System Development (Attorney 

Reference No. PC/ASB/19715), ExtracSiiig Dafa'Sectioiis f^^ Data 

- ^ Stream (Attorney Rrf^ence^ l^o. PC/A Control System (Attorney- 

Reference No. PC/ASB/19717), Data Processing System (Attorney Refereiice No. 
'PiG/ASB/l97i8), Br and Receiver/Decoder and 

25 Remote Controller therefor (Attorney Reference No. PC/ASB/1972(y). The disclosures 
of these documents are incorporated herein by reference. The list of applications 
includes the present ^pjllicaltion.^^^ ^ 
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CLAIMS 

. I- r V A ccmdj^ipn^l access j >: . .v o-. j- cm , ; 

■ me£mS;,fo^^ an^: - y,; .4 - ^ 

means for receiving the messages, said receiving means being adapted to 
Spo^r (^mmumcat^^ via a ^omiguqicatipq^^ server gqmiccted 

iV^,^,'^^di8BCtljf;to wid ge - ' ; ^ 0 - . / ? - : . 

• V. iAj9QP5^^^P^ ?PlP^§s system s^ccording tot^QaJgn l;^wl}erein said mes/sage is an 
je3P::C^tiUementvme^a£e for ^ransiQissran tp^|hQ-receJLving .means^^.^^ means 
being adapted to generate entitlement messages in response to data rgceiyed' jGrom. said 
10 receiving means. 

^:ni\': ' ;.r.:.> , ' . •'' i.yo lit. , 'In: *• • ... ^ ; ; 0 ' ^.ru/i rl ^\ .^-i ,\ 1 2:. rD M 

.t I J^Mr^ AcondijCipn^l access system acqg^rding taQ^tmrt 2» wherein s^d generating 
^eM34s.arrang message as a^packptof 4ifigt^ c^ata tor said^ecciiving 

■!0:. said (communications scrycn or^yk a-satpUij:^^^ , 

c -\4. A Conditional access system accorfii^ 
IS i ;rc<^ving^^ means is connectable^ to > said comop^iJU^^ and 
v-rzictelephoperlink. :• . ^ . ■ - a- • v-.-^ aob-.v^ijil bu^ i 

: 5o . ' : . A coi^ditional access ^y^tem for ,^ordi^g conditional ac^ss^tajsubscribers, 

i?^5C h : a^bscribenmg^agepwit^ ,i :r:v:r 3 >:,r 1 rr-^ T^v^ 

20= . j ^^ . -a subsadl)er auttip^ation system ^cou^^ pianagemeht 
. .'^ .syst|Mn; andk . . . ^ - -.^'^^ru '. t..;: "f T'f ' r f 3 -v . 
^ .1-: T a communications server; , saiA 

P .,^,^rauthonzationj5ystem :^ / / - ^' v:::r:(:r/' ; l•^l:.-!:r:J 1:^.1^: . . :o. . J 'J 

6. A conditional access system according 40^. Gl2dm^S,^,f^^ a 
25 receiver/decoder for the subscriber, the receiver/decoder being connectable to said 
communications server, and hence to said subscriber authorization system, via a 
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modem and telephone link. 

" ' 7. ^ A ^ brdadSast Smd^ redepfion systcin including a conditional access system 

' a^ixotdinjg^to'^ ^ • 

8, A broadcast and reception system comprising: 

5 ' incaife' for generating a plurality of entitlement messages relating to broadcast 

programs;' ' *' -'^ r-pv^.^ ' . .* : ^ :^ - 

nie^ for receiving ^aid ini^^ from said generating means; and 
mdir& for iioimecting flie receiving means to the generating means to receive 
said messages^ said connecting means being capable of effecting a dedicated 
10 comiec^iod beihvjbeh the"" receiving naeans and the g;enerating means/ 

9. A broadcast and reception system comprising: 

ni'e^ fbr gcfiCTiatinig a entitlement messages relating to broadcast 

programs; ' ' • >^ 

means for receiving said messages from said generating means via a modem; 

means tor connectmg said modem to said generating means and said receiving 

means. 

' / 10: j^..|^^^jj^|L^ijj rcdep?ion"'sy:^fcm accordiiig to Claim 9, wherein said 
generating means is connected to said modem via a communications server^ 

20 11. A btbaddaLsran^^fcceptio^ 9 or 10, wherein said 

receiving means is adapted to communicate with said gcneratiiig means via said 
modem and connecting means. 

12/ X broadcast 'said rcdcption system ' a<^ Qaim 11, wherein said 

Tcccivihg noieahs comprises means for reading a smaftcard msertable thereinto by an 
25 end user, the smartcard having stored therein d^^ to' initiate automatically the 
tranmission of a message from said receiving means to said generating means upon 



BNSIXCID: <WO_9843426A1J > 



, .\yO 98/43426 . PGT/EP97/02108 

- 47 - 



insertion of the smartcaid by the end user. 



13. A broadcast and reception . system .^o^i^^^ Qaim ^llor 12, fiirther 

comprising a voice link to enable the end user^of the. br^adca^t Md 
to communicate with the generating means. 

5 , 14. A broadcast and reception, ^y stem according to ^y pf ,Qaiii^5 .8^ to 13, wherein 
said receiving means comprises a receiver/decoder comprising means for jreceiving a 
coinpressed MPEG-type signal, means for decoding^the^ recejive^ provide a 

television signal and means for supplying Uie tel^yisioxi sigjnyaL to ^ television. 



15. A broadcast and reception ^^y stem, (^m^rising:^ ^-n^r 

10 a broadcast system including means for broadcasting a callback request; 

and at the reception end: 

a receiver including means for callijng, back,, the^ bro^dca^t sy^t^em in response 
to the callback request. 

16. A system according to Claim 15, wherein the means for calling back the 
15 broadcast system includes a modem connectable to a. telephone system. 

17. A system according to Claim 15 or 16, wherehi the means for calling back the 
broadcast sjrstem. is arranged to trams^^ brcmdj^^ systc^ information 
concerning the receiver. . 

18. A system accoi:ding to Claim 17, wherein the broadcast system includes means 
20 for storing the information. . , . . 

19. A system according to any of Claims 15 to 18, wherein the broadcast means 
is arranged to broadcast a callback request which includes a comi^iand that the 
callback be made at a given time, and the means for callinc back the broadcast system 
is arranged to respond to said comniand. , , „ , 
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20, A system according to any of Claims 15 to 19, wherein the broadcasting means 
is arranged to broadcast as the callback request one or more entitlement messages for 
broadcast. 

21; A system- according to -any of Claims 15- to 20; wherein the broadcast system 

5 includes means for generating a check message and passing this to the receiver, the ; 
receiver includes means for exicrjjpting the check message and passing this to the i 
broadcast system, and the brpad^t system further includes means for decrypting the 
check message received from the receiver and comparing this with the original check | 
message. ^^ ; ^ [ 

10 22. A conditional access system or a broadcast and reception system substantially as 
herein described with reference to and as illustrated in the accompanying drawings, 
and especially Figures 112, 13 or 14 thereof. " • ^] ? 
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